Benign Download

Backdoor.Win32.Hupigon.blxn

Image list icon size importExecute shell command (ShellExecuteA)

SHA-25679e6aeca62e8399f35b36c7f1f43843ddc2e4b0fa400b2de09d4d8ca40592e01

Evidence

Query/set system parameters (string) 0x9efc2–0x9f062

0x9efc26765000000005472616e736c6174654dge....TranslateM
0x9efd24449537973416363656c000000005472DISysAccel....Tr
0x9efe261636b506f7075704d656e7500000000ackPopupMenu....
0x9eff253797374656d506172616d6574657273SystemParameters
0x9f002496e666f4100000053686f7757696e64InfoA...ShowWind
0x9f0126f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0xa163c–0xa172c

0xa163cdc30eb300231793187319631ad311c34.0.0.1y1.1.1.1.4
0xa164c37374537e4371c384b3866387c38dc3877E7.7.8K8f8|8.8
0xa165c14392b3944398c39a939e139fa39113a.9+9D9.9.9.9.9.:
0xa166c643a943ac93ae53ae93aed3af13af53ad:.:.:.:.:.:.:.:
0xa167cf93afd3a013b053b093b0d3b113b153b.:.:.;.;.;.;.;.;
⋯11 more rows

Execute shell command (ShellExecuteA) 0xa1830–0xa1a00

⋯13 more rows
0xa1900243e283e2c3e303e343e383e483e683e$>(>,>0>4>8>H>h>
0xa1910703e743e783e7c3e803e843e883e8c3ep>t>x>|>.>.>.>.>
0xa1920903ea03ec03ec83ecc3ed03ed43ed83e.>.>.>.>.>.>.>.>
0xa1930dc3ee03ee43ee83ef83e183f203f243f.>.>.>.>.>.? ?$?
0xa1940283f2c3f303f343f383f3c3f403f503f(?,?0?4?8?<?@?P?
0xa1950703f783f7c3f803f843f883f8c3f903fp?x?|?.?.?.?.?.?
0xa1960943f983fac3fcc3fd43fd83fdc3fe03f.?.?.?.?.?.?.?.?
0xa1970e43fe83fec3ff03ff43f000000300100.?.?.?.?.?...0..
0xa198048040000083028303030343038303c30H....0(0004080<0
0xa19904030443048304c305030603080308830@0D0H0L0P0`0.0.0
⋯7 more rows