Benign Download

Backdoor.Win32.Hupigon.dbe

Embedded PE binary at file offset 0x12f378 (~970752 bytes)Image list icon size import

SHA-2561c46ee3c2e8b13289357851b6b2a10fa46f8b01ccccbca76b894cbc5614d3432

Evidence

Query/set system parameters (symbol) 0x117534–0x117624

0x117534029f2800159f2800000000001e9f2800..(...(.......(.
0x117544309f2800429f28004d9f28005b9f28000.(.B.(.M.(.[.(.
0x1175546a9f28007d9f2800939f2800a69f2800j.(.}.(...(...(.
0x117564bd9f2800ce9f2800e69f2800f39f2800..(...(...(...(.
0x11757403a0280015a0280022a0280031a02800..(...(.".(.1.(.
⋯11 more rows

Execute shell command (ShellExecuteA) 0x117834–0x117964

⋯3 more rows
0x11786479ab280088ab28009aab280000000000y.(...(...(.....
0x117874aaab2800c2ab2800daab2800ecab2800..(...(...(...(.
0x117884fdab280016ac280031ac280050ac2800..(...(.1.(.P.(.
0x11789465ac28007bac280091ac2800a5ac2800e.(.{.(...(...(.
0x1178a4bbac2800cfac2800e2ac2800f5ac2800..(...(...(...(.
0x1178b409ad28001aad280031ad280048ad2800..(...(.1.(.H.(.
0x1178c460ad280070ad28008aad28009ead2800`.(.p.(...(...(.
0x1178d4b1ad280000000000c6ad2800daad2800..(.......(...(.
0x1178e400000000eaad2800fdad280000000000......(...(.....
0x1178f410ae28001dae28002aae280038ae2800..(...(.*.(.8.(.
⋯7 more rows

Query/set system parameters (string) 0x1189b4–0x118a54

0x1189b46765000000005472616e736c6174654dge....TranslateM
0x1189c44449537973416363656c000000005472DISysAccel....Tr
0x1189d461636b506f7075704d656e7500000000ackPopupMenu....
0x1189e453797374656d506172616d6574657273SystemParameters
0x1189f4496e666f4100000053686f7757696e64InfoA...ShowWind
0x118a046f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Embedded PE binary at file offset 0x12f378 (~970752 bytes) 0x12f338–0x12f408

⋯3 more rows
0x12f36800000000000000000000000000000000................
0x12f3784d5a50000200000004000f00ffff0000MZP.............
0x12f388b80000000000000040001a0000000000........@.......
0x12f39800000000000000000000000000000000................
⋯7 more rows