Benign Download

Backdoor.Win32.Delf.jxq

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2561fdb4504496a729f68f2ad2ab0c8e5be92414f2aa146c7e96e4b61e1a7b91dd2
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x759b8–0x75a58
0x759b86765000000005472616e736c6174654dge....TranslateM
0x759c84449537973416363656c000000005472DISysAccel....Tr
0x759d861636b506f7075704d656e7500000000ackPopupMenu....
0x759e853797374656d506172616d6574657273SystemParameters
0x759f8496e666f4100000053686f7757696e64InfoA...ShowWind
0x75a086f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x795c4–0x796b4
0x795c44f398939bf39043a2e3a3e3a743a7e3aO9.9.9.:.:>:t:~:
0x795d4903ab33a1f3f2f3f00200200a0000000.:.:.?/?. ......
0x795e42731373152310d32123217322b325b32'171R1.2.2.2+2[2
0x795f4a232bf32d732e83221333e339233a233.2.2.2.2!3>3.3.3
0x79604b433f83316342334ad34be3432353735.3.3.4#4.4.42575
⋯11 more rows
Execute shell command (ShellExecuteA) 0x798d0–0x799d0
⋯3 more rows
0x79900673f733f7a3fe63fee3ff43f00800200g?s?z?.?.?.?....
0x79910ec010000003008302b30373078308030.....0.0+070x0.0
0x79920863092309a300b311331193125313231.0.0.0.1.1.1%121
0x7993050316231a931b131b731c331cb310732P1b1.1.1.1.1.1.2
0x79940123232327d3285328b3297329f32db32.222}2.2.2.2.2.2
⋯9 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.