Benign Download

Backdoor.Win32.Hupigon.cscj

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256531fabb9609bf322d4d0a4e67c54be4a41ea3d167c083dd32126507b1810643d

Evidence

Query/set system parameters (symbol) 0xa163c–0xa172c

0xa163cb036bb36c136c636d136d736dc36e736.6.6.6.6.6.6.6.6
0xa164ced36f236fd3603370837133719371e37.6.6.6.7.7.7.7.7
0xa165c29372f3734373f3745374a3755375b37)7/747?7E7J7U7[7
0xa166c60376b3771377637813787378c379737`7k7q7v7.7.7.7.7
0xa167c9d37a237ad37cf38db38e838fa382a39.7.7.7.8.8.8.8*9
⋯11 more rows

Execute shell command (ShellExecuteA) 0xa1830–0xa1a00

⋯13 more rows
0xa190086348a348e34923496349a34ac34c434.4.4.4.4.4.4.4.4
0xa1910cd36d136d536d936dd36e136e536e936.6.6.6.6.6.6.6.6
0xa1920ed36f136f536f936fd36013705370937.6.6.6.6.6.7.7.7
0xa19300d371137153719371d372137f5388939.7.7.7.7.7!7.8.9
0xa19409739403c5f3c773c8f3cfe3c153d283d.9@<_<w<.<.<.=(=
0xa19503a3db83dcd3de23de73df43d143e2e3e:=.=.=.=.=.=.>.>
0xa1960333e053f663f733f8e3f943fa83fad3f3>.?f?s?.?.?.?.?
0xa197000200100660100008d30b230bf30ca30. ..f....0.0.0.0
0xa1980eb30013119311e31533162316f317a31.0.1.1.1S1b1o1z1
0xa19908d319a31e231e73101322f323b324732.1.1.1.1.2/2;2G2
⋯7 more rows

Query/set system parameters (string) 0xb9503–0xb95a3

0xb950373736167650000005472616e736c6174ssage...Translat
0xb9513654d4449537973416363656c00000054eMDISysAccel...T
0xb95237261636b506f7075704d656e75000000rackPopupMenu...
0xb953353797374656d506172616d6574657273SystemParameters
0xb9543496e666f4100000053686f7757696e64InfoA...ShowWind
0xb95536f7700000053686f775363726f6c6c42ow...ShowScrollB
⋯5 more rows