Benign Download

Trojan-Downloader.Win32.Banload.acv

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256575528bd3e6571e904515d325a3acac8756941432a6364b5abed7a284a0121cc
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x4ed94–0x4ee34
0x4ed94654d65737361676500005472616e736ceMessage..Transl
0x4eda46174654d4449537973416363656c0000ateMDISysAccel..
0x4edb4547261636b506f7075704d656e750000TrackPopupMenu..
0x4edc453797374656d506172616d6574657273SystemParameters
0x4edd4496e666f4100000053686f7757696e64InfoA...ShowWind
0x4ede46f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Query/set system parameters (symbol) 0x51424–0x515d4
0x5142400000000000000000000000000000000................
0x5143400000000000000000000000000000000................
0x5144400000000000000000000000000000000................
0x5145400000000000000000000000000000000................
0x5146400000000000000000000000000000000................
⋯23 more rows
Execute shell command (ShellExecuteA) 0x515f0–0x517b0
⋯12 more rows
0x516b000000000000000000000000000000000................
0x516c000000000000000000000000000000000................
0x516d000000000000000000000000000000000................
0x516e000000000000000000000000000000000................
0x516f000000000000000000000000000000000................
0x5170000000000000000000000000000000000................
0x5171000000000000000000000000000000000................
0x5172000000000000000000000000000000000................
0x5173000000000000000000000000000000000................
0x5174000000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.