Benign Download

Worm.Win32.AutoRun.bcy

Image list icon size importExecute shell command (ShellExecuteA)
SHA-25652d0a13c9f15b915911e7362ec5e4b7c19ae9a2b4c0eedf822139f8c0e8466db
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0xa55b4–0xa5654
0xa55b46765000000005472616e736c6174654dge....TranslateM
0xa55c44449537973416363656c000000005472DISysAccel....Tr
0xa55d461636b506f7075704d656e7500000000ackPopupMenu....
0xa55e453797374656d506172616d6574657273SystemParameters
0xa55f4496e666f4100000053686f7757696e64InfoA...ShowWind
0xa56046f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0xa8638–0xa8728
0xa8638483c4c3c503c543c583c5c3c603c643cH<L<P<T<X<\<`<d<
0xa8648683c6c3c703c743c783c7c3c803c903ch<l<p<t<x<|<.<.<
0xa8658a13ca53cb83cd83ce03ce43ce83cec3c.<.<.<.<.<.<.<.<
0xa8668f03cf43cf83cfc3c003d043d083d0c3d.<.<.<.<.=.=.=.=
0xa8678103d143d183d1c3d283d353d393d4c3d.=.=.=.=(=5=9=L=
⋯11 more rows
Execute shell command (ShellExecuteA) 0xa882c–0xa89fc
⋯13 more rows
0xa88fcbc36c036c436c836cc36d436e836fa36.6.6.6.6.6.6.6.6
0xa890cfe36103720372c37303738373c374037.6.7 7,70787<7@7
0xa891c443748374c375037543758375c376037D7H7L7P7T7X7\7`7
0xa892c643768376c377037743778377c378037d7h7l7p7t7x7|7.7
0xa893c843788378c37903794379e37a237b437.7.7.7.7.7.7.7.7
0xa894cc537c937d937023825384c386838fc38.7.7.7.8%8L8h8.8
0xa895c1c39243928392c393039343938393c39.9$9(9,9094989<9
0xa896c40394439543974397c39803984398839@9D9T9t9|9.9.9.9
0xa897c8c399039943998399c39ae3abd3acc3a.9.9.9.9.9.:.:.:
0xa898c003c4e3c553c763cd73dee3df53db53e.<N<U<v<.=.=.=.>
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.