Benign Download

Backdoor.Win32.Hupigon.cgdz

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2562c1434902eebbc9b9d38cfcee5c40f33696f75b133ec926fe2b4b3cf0a838951
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x9fdc2–0x9fe62
0x9fdc26765000000005472616e736c6174654dge....TranslateM
0x9fdd24449537973416363656c000000005472DISysAccel....Tr
0x9fde261636b506f7075704d656e7500000000ackPopupMenu....
0x9fdf253797374656d506172616d6574657273SystemParameters
0x9fe02496e666f4100000053686f7757696e64InfoA...ShowWind
0x9fe126f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0xa363c–0xa372c
0xa363c333333333333333333333333333333ff333333333333333.
0xa364cffff000033333333333344444433ffff....333333DDD3..
0xa365c33333388888800003a444333333a2222333.....:DC33:""
0xa366c2438888f333338f3333800003a224333$8..338.38..:"C3
0xa367c3333a2222438f38f333333833338000033."$8..333.38..
⋯11 more rows
Execute shell command (ShellExecuteA) 0xa3830–0xa3a00
⋯13 more rows
0xa390000008000008000000080800080000000................
0xa3910800080008080000080808000c0c0c000................
0xa39200000ff0000ff000000ffff00ff000000................
0xa3930ff00ff00ffff0000ffffff0033333333............3333
0xa39403333333300000000000033000fffffff3333......3.....
0xa3950fff030000fffffff000000030ffffff0..0.............
0xa3960788700330fffff0788e7f0330fffff08x..3.......3....
0xa3970888780330fffff08e88780330fffff07...3.......3....
0xa3980ee87f0330ffffff0788703330fffffff...3....x..3....
0xa3990000033330ffffffffff033330fffffff..33......33....
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.