Benign Download

Trojan-Banker.Win32.Banker.drk

Image list icon size importExecute shell command (ShellExecuteA)

SHA-25682f00f5ee31b589efb9ebf9b22f822461284b06bfb46fe2e594733b3a96fc74d

Evidence

Regex component marker 0x57a84–0x57ae4

0x57a84ffffffff0c0000004d6354734b736864........McTsKshd
0x57a942e65786500000000ffffffff0c000000.exe............
0x57aa44d63536869656c642e65786500000000McShield.exe....
0x57ab4ffffffff0c0000004d63646574656374........Mcdetect
⋯3 more rows

Query/set system parameters (string) 0x5b8b6–0x5b956

0x5b8b66765000000005472616e736c6174654dge....TranslateM
0x5b8c64449537973416363656c000000005472DISysAccel....Tr
0x5b8d661636b506f7075704d656e7500000000ackPopupMenu....
0x5b8e653797374656d506172616d6574657273SystemParameters
0x5b8f6496e666f4100000053686f7757696e64InfoA...ShowWind
0x5b9066f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x5e43c–0x5e52c

0x5e43ccf30dd30fa3145325f32b532f632fd32.0.0.1E2_2.2.2.2
0x5e44c14333f33643372338b332634b334b734.3?3d3r3.3&4.4.4
0x5e45cda34de340f359335c135f6351b368b36.4.4.5.5.5.5.6.6
0x5e46cad36f1361d373c375c37603764376837.6.6.7<7\7`7d7h7
0x5e47c6c377037743778377c37803784378837l7p7t7x7|7.7.7.7
⋯11 more rows

Execute shell command (ShellExecuteA) 0x5e60c–0x5e7cc

⋯12 more rows
0x5e6ccdc32e432ec32f432fc3204330c331b33.2.2.2.2.2.3.3.3
0x5e6dc2733343346334c33643384338c339033'343F3L3d3.3.3.3
0x5e6ec943398339c33a033a433a833ac33c033.3.3.3.3.3.3.3.3
0x5e6fce033e833ec33f033f433f833fc330034.3.3.3.3.3.3.3.4
0x5e70c04340834283441346c347c349834b134.4.4(4A4l4|4.4.4
0x5e71ce834fa340035183568357f3524363e36.4.4.5.5h5.5$6>6
0x5e72ca036b036bc36c036c836cc36d036d436.6.6.6.6.6.6.6.6
0x5e73cd836dc36e036e436e836ec36f036f436.6.6.6.6.6.6.6.6
0x5e74cfc361037253729373c37513774378037.6.7%7)7<7Q7t7.7
0x5e75c8437903794379c37a037a437a837ac37.7.7.7.7.7.7.7.7
⋯7 more rows