Benign Download

Backdoor.Win32.Snowdoor.39

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256437149702c368d7ce2f7648b25219eeb1d1e738c10ca42070fff90deeae4e382
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x95760–0x95800
0x95760000053686f774f776e6564506f707570..ShowOwnedPopup
0x957707300000053686f775363726f6c6c4261s...ShowScrollBa
0x957807200000053686f7757696e646f770000r...ShowWindow..
0x9579053797374656d506172616d6574657273SystemParameters
0x957a0496e666f41000000547261636b506f70InfoA...TrackPop
0x957b075704d656e7500005472616e736c6174upMenu..Translat
⋯5 more rows
Image list icon size import 0x9b5d0–0x9b790
⋯18 more rows
0x9b6f000000000000000000000000000000000................
0x9b70000000000000000000000000000000000................
0x9b71000000000000000000000000000000000................
0x9b72000000000000000000000000000000000................
⋯7 more rows
Execute shell command (ShellExecuteA) 0x9b8fc–0x9b9bc
⋯3 more rows
0x9b92c00000000000000000000000000000000................
0x9b93c00000000000000000000000000000000................
0x9b94c00000000000000000000000000000000................
⋯7 more rows
Query/set system parameters (symbol) 0x9bce4–0x9bed4
⋯20 more rows
0x9be2400000000000000000000000000000000................
0x9be3400000000000000000000000000000000................
0x9be4400000000000000000000000000000000................
⋯9 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.