[Community-sigs] Win.Trojan.Fosniw

[Askar Dyussekeyev]

Win.Trojan.Fosniw:1:17584:558BEC83EC08894DFC8B4DFCE8????????3B45087305E8????????8B45FC8B48183B4D0873158B55FC8B4214508B4D08518B4DFCE8????????EB4A0FB6550C85D27432837D0810732C8B45FC8B4D083B481473088B55088955F8EB098B45FC8B4814894DF88B55F8526A018B4DFCE8????????EB10837D0800750A6A008B4DFCE8????????33C03B45081BC0F7D88BE55DC20800

signature looks for specific block of code

detections (64):
01b861259fff684348ddfdf8bc1096e3
0210a58d3591ba65b91f49218f045dcd
025b4f73f11133195f18e6898bc7afb8
02b6b177229f5e0359d4d439c6d68756
038d7efc1bf885449bb3bbf6c5f02a80
0d5213d74f1082981b0c3b35659f4058
18e4d91aa01348bd3178a8713e2e80ed
1a8db096ab6c235e3f6bdadb160979c9
22a3d2b965d6a3cbe82f21fac0850e23
24de81d5006b36567d01c3c9d35b31cc
2ea5a8de1c4de5275a0687fa37049563
36c84db1291f0e55a8e7d3b5e51720d4
37d3ef46e94c6e3df1df88e471fb21de
39030db69b7a33f36f5f0327279cf954
3cdb1d846caf28ef87fe0fd96f43a549
400d0d96fc0264b7536cfd0196564344
428adf82bf11f05ba81c04cd419e2489
441a2329fb5b1504eaab3586ad01a9a1
45a63098f5ae00ec18bdab4b4934224d
4668b7822f5b094a3d97f76661adfae3
49c1a45911546efba1a378e9d6dd5757
49ed9bbdd66ffb67160a20233b1d8cf8
4a4d2c6b89f2ce2a21689ae7d77782e0
4d063d6cb8d2e16c8669faa32c10f334
52babcf9d5090781aa35a767f3a8e1dd
580239a4820aba2664cb9be4e21d0762
58216329ead30423caf4da3adc2727f9
65fb6c28d297fcfe4264c445e3c66d8f
6701156ca9403ed7f8f59e97f3c38936
6754dcf6cb598c65cc81bcf7bac57f40
69a363104a585a5274c33e911aea7276
6f374882a5c2d84b96a1521a4198b080
73f885b228cc80db7623220f07425f9c
77865e42e8e089f3b29ff80248e45537
7a547ef9620f09ac332216521aad5c23
7ced5fc8890179b57e78977b11e8a8f2
7ec79d01c3b2f7611929bb949620236a
83de59925779e0a5cad18b013ca618d9
8559cc69ab58ca538177ce36db4aa5b2
85c02dd77ddfc6180db473815c420632
8a156cd55f7c64501674637cda88f1a4
8f2ca05bfeb3fe966250447105a853f9
91aa3a4c5ecda23e76668d9a47de9b75
9785648d59f3de882460994422eeccb5
a046c8c8b5e9689c847654da92a07966
a3a01a7dd38ad8dd88306a1a5e433009
b1bb24e000133b66ffb28bbb68807c8c
b20a9bbb09271c6a93737b1d1829fe56
b4ac0716fb6693127ab0006e4d0d9d7a
ba3111e9b723a297463f95a77df10544
bb1444f4cbd6c19f639d9e3d94fd0ec4
be335f6a27afc49c7d22d15e679cde49
c410cca5233a18aefc22e6ae65be714a
c6a39d54f8a11c85f35546bf0570333a
d064ff188180280afc8ca14ccad0d46c
d08f18df8700f756bbc6d6b467d2e700
d59b373c0479de80b7ca696cc37b5d61
d82ab7eb0d1e48a16d2c7e3994bde825
dba79fd0336d0cf8dea6a56c30c18c8a
e7a4b423dd6ec9667aec69c6cb8c9f0f
e7f82bb481968518e4353e599729dfad
f8f44bfafdd1f7fd14fd2c9f19eef121
fa9b28b2daca32ce5fbb9b0a09cb3116
ffc30234d3a04d4a9f226a7b28e8f0f6