Benign Download

Backdoor.Win32.Hupigon.botw

Image list icon size importExecute shell command (ShellExecuteA)

SHA-25619406ad720fb45336138b85ee6c86fcdd27890ac3ffc814228a2bbe1d1d79d11

Evidence

Query/set system parameters (string) 0x9edc2–0x9ee62

0x9edc26765000000005472616e736c6174654dge....TranslateM
0x9edd24449537973416363656c000000005472DISysAccel....Tr
0x9ede261636b506f7075704d656e7500000000ackPopupMenu....
0x9edf253797374656d506172616d6574657273SystemParameters
0x9ee02496e666f4100000053686f7757696e64InfoA...ShowWind
0x9ee126f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0xa163c–0xa172c

0xa163c4c3254325c32643273327f328c329e32L2T2\2d2s2.2.2.2
0xa164c4c3361330e3637369836393798379c37L3a3.676.697.7.7
0xa165ca037a437a837ac37ee37343838383c38.7.7.7.7.74888<8
0xa166c403844384838a638c738cb38cf38d338@8D8H8.8.8.8.8.8
0xa167cd738db382d398f3a9b3aa23aac3ab73a.8.8-9.:.:.:.:.:
⋯11 more rows

Execute shell command (ShellExecuteA) 0xa1830–0xa1a00

⋯13 more rows
0xa1900e835ec35f035f435f835fc3500360436.5.5.5.5.5.5.6.6
0xa191008360c361a362c363036343638364836.6.6.6,6064686H6
0xa192059365d3670368536a836b436b836c836Y6]6p6.6.6.6.6.6
0xa1930d036d436d836dc36e036e436e836ec36.6.6.6.6.6.6.6.6
0xa1940f036f436f836fc360037043708370c37.6.6.6.6.7.7.7.7
0xa19501037143718371c372037243728372c37.7.7.7.7 7$7(7,7
0xa19603037343738373c374037443748374c37074787<7@7D7H7L7
0xa19705037543758375c376037643768376c37P7T7X7\7`7d7h7l7
0xa198070377e3790379e37a237b437cd37d837p7~7.7.7.7.7.7.7
0xa1990e837f8370038043808380c3810381438.7.7.8.8.8.8.8.8
⋯7 more rows