Benign Download

Backdoor.Win32.Delf.jhd

Image list icon size importExecute shell command (ShellExecuteA)

SHA-2566d92edf0480ebb355fec3a4173f67d832d14cd6ecab27a704271f8ad2a3da8d8

Evidence

Query/set system parameters (string) 0x53876–0x53916

0x538766765000000005472616e736c6174654dge....TranslateM
0x538864449537973416363656c000000005472DISysAccel....Tr
0x5389661636b506f7075704d656e7500000000ackPopupMenu....
0x538a653797374656d506172616d6574657273SystemParameters
0x538b6496e666f4100000053686f7757696e64InfoA...ShowWind
0x538c66f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x55424–0x55514

0x5542422302a3033303f3045304d3056306230"0*030?0E0M0V0b0
0x5543467307030793082308b309430bc30c530g0p0y0.0.0.0.0.0
0x55444ce30d430e530f030f53012311a312231.0.0.0.0.0.1.1"1
0x5545442318b31b931dc31f9313a325a328432B1.1.1.1.1:2Z2.2
0x554649e32bc32143333338433b83304346c34.2.2.333.3.3.4l4
⋯11 more rows

Execute shell command (ShellExecuteA) 0x555f8–0x557b8

⋯12 more rows
0x556b8513a803ab63ad03a053b433b753bb33bQ:.:.:.:.;C;u;.;
0x556c8e53b273c463c4e3c563c5e3c953ca33c.;'<F<N<V<^<.<.<
0x556d8a83cb33cb93cbe3cc93ccf3cd43cdf3c.<.<.<.<.<.<.<.<
0x556e8e53cea3cf53cfb3c003d0b3d113d163d.<.<.<.<.=.=.=.=
0x556f8213d273d2c3d373d3d3d423d4d3d533d!='=,=7===B=M=S=
0x55708583d633d693d6e3d793d7f3d843d8f3dX=c=i=n=y=.=.=.=
0x55718953d9a3da53dab3db03dbb3dc13dc63d.=.=.=.=.=.=.=.=
0x55728d13dd73ddc3de73ded3df23dfd3d033e.=.=.=.=.=.=.=.>
0x55738083e133e193e1e3e293e2f3e343e3f3e.>.>.>.>)>/>4>?>
0x55748453e4a3e553e5b3e603e6b3e713e763eE>J>U>[>`>k>q>v>
⋯7 more rows