Benign Download

Backdoor.Win32.Snowdoor.24

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2560fd5bc030b6f98601966b764c48a297a9c8cfcd617e9182b1d788b52f378a5f4
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x8f58a–0x8f62a
0x8f58a000053686f774f776e6564506f707570..ShowOwnedPopup
0x8f59a7300000053686f775363726f6c6c4261s...ShowScrollBa
0x8f5aa7200000053686f7757696e646f770000r...ShowWindow..
0x8f5ba53797374656d506172616d6574657273SystemParameters
0x8f5ca496e666f41000000547261636b506f70InfoA...TrackPop
0x8f5da75704d656e7500005472616e736c6174upMenu..Translat
⋯5 more rows
Image list icon size import 0x945b4–0x94774
⋯18 more rows
0x946d46b6574314572726f72044c65667403a8ket1Error.Left..
0x946e40003546f7002380000065454696d6572..Top.8...TTimer
0x946f40654696d65723208496e74657276616c.Timer2.Interval
0x9470403a00f074f6e54696d6572070b54696d....OnTimer..Tim
⋯7 more rows
Execute shell command (ShellExecuteA) 0x948cc–0x9498c
⋯3 more rows
0x948fc00000000000000000000000000000000................
0x9490c00000000000000000000000000000000................
0x9491c00000000000000000000000000000000................
⋯7 more rows
Query/set system parameters (symbol) 0x94cb0–0x94ea0
⋯20 more rows
0x94df000000000000000000000000000000000................
0x94e0000000000000000000000000000000000................
0x94e1000000000000000000000000000000000................
⋯9 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.