osandamalith.com
Lab 13-02 Analysis | 🔐Blog of Osanda
I felt bored and thought of having a look at this exe. These are my rough notes on this one. Every 5 seconds the function ‘401851’ is called. Basically, this malware takes screenshots and encrypts …