Benign Download

Backdoor.Win32.Delf.cir

Image list icon size importExecute shell command (ShellExecuteA)

SHA-2562cfdaa44fe5d33bdcb7b359926c63f1682fe850540f992c68d47b516e2153f20

Evidence

Query/set system parameters (string) 0x757b8–0x75858

0x757b86765000000005472616e736c6174654dge....TranslateM
0x757c84449537973416363656c000000005472DISysAccel....Tr
0x757d861636b506f7075704d656e7500000000ackPopupMenu....
0x757e853797374656d506172616d6574657273SystemParameters
0x757f8496e666f4100000053686f7757696e64InfoA...ShowWind
0x758086f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x795c4–0x796b4

0x795c4d33b513c2d3d523d783de63d5b3e283f.;Q<-=R=x=.=[>(?
0x795d4473f0000006002004c0000009031bf31G?...`..L....1.1
0x795e41f33c333d3331e344f345c3488348d34.3.3.3.4O4\4.4.4
0x795f43d354b35d835e136fa3653376e378c37=5K5.5.6.6S7n7.7
0x796040b3852388f38f1383339e839073b0e3b.8R8.8.839.9.;.;
⋯11 more rows

Execute shell command (ShellExecuteA) 0x798d0–0x799d0

⋯3 more rows
0x7990003301830463058300f315f316f311c32.0.0F0X0.1_1o1.2
0x7991063326a328132b5320133403361336a33c2j2.2.2.3@3a3j3
0x79920c1333c34433479349435d835fe350536.3<4C4y4.5.5.5.6
0x79930413663368b369436ed36103717374d37A6c6.6.6.6.7.7M7
0x799406c378f379837e63712384938b438d339l7.7.7.7.8I8.8.9
⋯9 more rows