Benign Download

Trojan-Downloader.Win32.Delf.imw

Image list icon size importExecute shell command (ShellExecuteA)

SHA-2560648b6a910c393e69abf84e70c2efbc0d167ddc55730bc1666759f9004ac84e9

Evidence

Query/set system parameters (string) 0x654cc–0x6556c

0x654cc6765000000005472616e736c6174654dge....TranslateM
0x654dc4449537973416363656c000000005472DISysAccel....Tr
0x654ec61636b506f7075704d656e7500000000ackPopupMenu....
0x654fc53797374656d506172616d6574657273SystemParameters
0x6550c496e666f4100000053686f7757696e64InfoA...ShowWind
0x6551c6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x67498–0x67578

0x67498383f3c3f403f443f483f4c3f583f683f8?<?@?D?H?L?X?h?
0x674a8743f783f803f843f883f8c3f903f943ft?x?.?.?.?.?.?.?
0x674b8983f9c3fa03fa43fa83fac3fb63fba3f.?.?.?.?.?.?.?.?
0x674c8cc3fdd3fe13ff43f00e0000048030000.?.?.?.?....H...
0x674d809302830343038304830503054305830.0(04080H0P0T0X0
⋯10 more rows

Execute shell command (ShellExecuteA) 0x67658–0x67808

⋯11 more rows
0x67708f437f837fc370038043808380c381038.7.7.7.8.8.8.8.8
0x67718143818381c3820382e3856385a385e38.8.8.8 8.8V8Z8^8
0x67728623866386a386e38723876387a387e38b8f8j8n8r8v8z8~8
0x67738823886388a388e38a038b038b438c438.8.8.8.8.8.8.8.8
0x67748e338043924392c393039343938393c39.8.9$9,9094989<9
0x677584039443948394c395039543958395c39@9D9H9L9P9T9X9\9
0x677686039643968396c3984399439a039a439`9d9h9l9.9.9.9.9
0x67778ac39b039b439b839bc39c039c439c839.9.9.9.9.9.9.9.9
0x67788cc39d039d439d839dc39e039e439e839.9.9.9.9.9.9.9.9
0x67798ec39f039f439f839fc39003a043a083a.9.9.9.9.9.:.:.:
⋯7 more rows