Benign Download

Trojan-Downloader.Win32.Dadobra.afp

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2564759b34c95b0424a78f0074506a381b0bba5491d05563ed3305238b0553be665
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x4f056–0x4f0f6
0x4f0566765000000005472616e736c6174654dge....TranslateM
0x4f0664449537973416363656c000000005472DISysAccel....Tr
0x4f07661636b506f7075704d656e7500000000ackPopupMenu....
0x4f08653797374656d506172616d6574657273SystemParameters
0x4f096496e666f4100000053686f7757696e64InfoA...ShowWind
0x4f0a66f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x51438–0x51518
0x5143878367c36803684369436b436bc36c036x6|6.6.6.6.6.6.6
0x51448c436c836cc36d036d436d836dc36f436.6.6.6.6.6.6.6.6
0x5145814371c372037243728372c3730373437.7.7 7$7(7,70747
0x5146838373c375037703778377c378037843787<7P7p7x7|7.7.7
0x5147888378c37903794379837ac37cc37d437.7.7.7.7.7.7.7.7
⋯10 more rows
Execute shell command (ShellExecuteA) 0x51604–0x517c4
⋯12 more rows
0x516c4783f7c3f803f943fb43fbc3fc03fc43fx?|?.?.?.?.?.?.?
0x516d4c83fcc3fd03fd43fd83fdc3fe03fe43f.?.?.?.?.?.?.?.?
0x516e4e83fec3ff03ff43ff83f000000200100.?.?.?.?.?... ..
0x516f404020000c630ca30ce30d230d630da30.....0.0.0.0.0.0
0x51704de30e230e630ea30ee30f230f630fa30.0.0.0.0.0.0.0.0
0x51714123120312431403148314c3150315431.1 1$1@1H1L1P1T1
0x5172458315c316031643168316c3170317431X1\1`1d1h1l1p1t1
0x5173478317c318031843188318c3190319431x1|1.1.1.1.1.1.1
0x51744a831c831d031d431d831dc31e031e431.1.1.1.1.1.1.1.1
0x51754e831ec31f031043224322c3230323432.1.1.1.2$2,20242
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.