Benign Download

Backdoor.Win32.GF.135.a

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2567bb8dee65555c6280fca3bd1b166375ca00a26430b2c81f402f195a4852f3562
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x4a962–0x4aa02
0x4a962654d65737361676500005472616e736ceMessage..Transl
0x4a9726174654d4449537973416363656c0000ateMDISysAccel..
0x4a982547261636b506f7075704d656e750000TrackPopupMenu..
0x4a99253797374656d506172616d6574657273SystemParameters
0x4a9a2496e666f4100000053686f7757696e64InfoA...ShowWind
0x4a9b26f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Query/set system parameters (symbol) 0x4c40c–0x4c61c
⋯8 more rows
0x4c48c00000000000000000000000000000000................
0x4c49c00000000000000000000000000000000................
0x4c4ac00000000000000000000000000000000................
⋯23 more rows
Execute shell command (ShellExecuteA) 0x4c638–0x4c818
⋯10 more rows
0x4c6d800000000000000000000000000000000................
0x4c6e800000000000000000000000000000000................
0x4c6f800000000000000000000000000000000................
0x4c70800000000000000000000000000000000................
⋯7 more rows
0x4c78800000000000000000000000000000000................
0x4c79800000000000000000000000000000000................
0x4c7a800000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.