Benign Download

Backdoor.Win32.Delf.aej

Embedded PE binary at file offset 0x637c8 (~205880 bytes)Image list icon size import
SHA-2563bd6cef5dda5e6eb2ec821f5719f2d7d5823f4961bb52d54efd23de6703b2765
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x5b54c–0x5b5ec
0x5b54c654d65737361676500005472616e736ceMessage..Transl
0x5b55c6174654d4449537973416363656c0000ateMDISysAccel..
0x5b56c547261636b506f7075704d656e750000TrackPopupMenu..
0x5b57c53797374656d506172616d6574657273SystemParameters
0x5b58c496e666f4100000053686f7757696e64InfoA...ShowWind
0x5b59c6f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Execute shell command (ShellExecuteA) 0x5d460–0x5d750
0x5d46000000000000000000000000000000000................
0x5d47000000000000000000000000000000000................
0x5d48000000000000000000000000000000000................
0x5d49000000000000000000000000000000000................
0x5d4a000000000000000000000000000000000................
⋯38 more rows
0x5d71000000000000000000000000000000000................
0x5d72000000000000000000000000000000000................
0x5d73000000000000000000000000000000000................
0x5d74000000000000000000000000000000000................
0x5d75000000000000000000000000000000000................
Embedded PE binary at file offset 0x637c8 (~205880 bytes) 0x63788–0x63858
⋯3 more rows
0x637b8410049004e00490043004f004e000000A.I.N.I.C.O.N...
0x637c84d5a50000200000004000f00ffff0000MZP.............
0x637d8b80000000000000040001a0000000000........@.......
0x637e800000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.