Benign Download

Trojan-Downloader.Win32.Banload.fbc

Image list icon size importExecute shell command (ShellExecuteA)

SHA-2563116d955a9da23048d7a1e468d56afe067446b7b7046fda4c92e866c97cf9d22

Evidence

Query/set system parameters (string) 0x540b2–0x54152

0x540b26765000000005472616e736c6174654dge....TranslateM
0x540c24449537973416363656c000000005472DISysAccel....Tr
0x540d261636b506f7075704d656e7500000000ackPopupMenu....
0x540e253797374656d506172616d6574657273SystemParameters
0x540f2496e666f4100000053686f7757696e64InfoA...ShowWind
0x541026f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x5642c–0x5650c

0x5642cd033e033003408340c34103414341834.3.3.4.4.4.4.4.4
0x5643c1c342034243428343834583460346434.4 4$4(484X4`4d4
0x5644c68346c347034743478347c3480349834h4l4p4t4x4|4.4.4
0x5645cb834c034c434c834cc34d034d434d834.4.4.4.4.4.4.4.4
0x5646cdc34e034f43414351c35203524352835.4.4.4.5.5 5$5(5
⋯10 more rows

Execute shell command (ShellExecuteA) 0x56608–0x567d8

⋯13 more rows
0x566d86c3d703d743d783d7c3d803d843d883dl=p=t=x=|=.=.=.=
0x566e88c3d903d943d983d9c3d6a3e6e3e723e.=.=.=.=.=j>n>r>
0x566f8763e7a3e7e3e823e863e8a3e8e3e923ev>z>~>.>.>.>.>.>
0x56708963e9a3e9e3eb63ec43ec83ee43eec3e.>.>.>.>.>.>.>.>
0x56718f03ef43ef83efc3e003f043f083f0c3f.>.>.>.>.?.?.?.?
0x56728103f143f183f1c3f203f243f283f2c3f.?.?.?.? ?$?(?,?
0x56738303f343f383f4c3f6c3f743f783f7c3f0?4?8?L?l?t?x?|?
0x56748803f843f883f8c3f903f943fa83fc83f.?.?.?.?.?.?.?.?
0x56758d03fd43fd83fdc3fe03fe43fe83fec3f.?.?.?.?.?.?.?.?
0x56768f03ff43ff83ffc3f00200100a8010000.?.?.?.?. ......
⋯7 more rows