Benign Download

Backdoor.Win32.Delf.hvt

Image list icon size importReferences the Windows debugger output API
SHA-256519a44610799b054b17770a7011e41a1501fbe107aa30d7e8894a14fef45fc97
MaleculeH₂(PoU)

Evidence

Query/set system parameters (symbol) 0xb358c–0xb367c
0xb358c000000002c4a0b003e4a0b00504a0b00....,J..>J..PJ..
0xb359c5c4a0b006a4a0b007a4a0b008e4a0b00\J..jJ..zJ...J..
0xb35aca04a0b00b64a0b00ca4a0b00e24a0b00.J...J...J...J..
0xb35bcf64a0b00084b0b00204b0b002e4b0b00.J...K.. K...K..
0xb35cc3e4b0b00504b0b005e4b0b00724b0b00>K..PK..^K..rK..
⋯11 more rows
Image list icon size import 0xb38c0–0xb39c0
⋯3 more rows
0xb38f026580b0034580b004c580b0000000000&X..4X..LX......
0xb39006a580b0082580b009a580b00ac580b00jX...X...X...X..
0xb3910be580b00d8580b00f4580b0014590b00.X...X...X...Y..
0xb39202a590b0040590b0056590b006a590b00*[email protected]..
⋯10 more rows
References the Windows debugger output API 0xb3fa8–0xb4078
⋯3 more rows
0xb3fd8000000005265616446696c6500000000....ReadFile....
0xb3fe84f75747075744465627567537472696eOutputDebugStrin
0xb3ff86741000000004d756c74694279746554gA....MultiByteT
0xb40086f57696465436861720000004d756c44oWideChar...MulD
⋯7 more rows
Query/set system parameters (string) 0xb4ada–0xb4b7a
0xb4ada73416363656c00000000547261636b50sAccel....TrackP
0xb4aea6f7075704d656e754578000000005472opupMenuEx....Tr
0xb4afa61636b506f7075704d656e7500000000ackPopupMenu....
0xb4b0a53797374656d506172616d6574657273SystemParameters
0xb4b1a496e666f4100000053686f7757696e64InfoA...ShowWind
0xb4b2a6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.