Benign Download

Backdoor.Win32.Hupigon.fgwh

Image list icon size importExecute shell command (ShellExecuteA)
SHA-25683c4e66a8791aca41a86d6ebb7bf74306f7dc6db5bf2f4287d8f1b5e76a3a099
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x9ed84–0x9ee24
0x9ed846765000000005472616e736c6174654dge....TranslateM
0x9ed944449537973416363656c000000005472DISysAccel....Tr
0x9eda461636b506f7075704d656e7500000000ackPopupMenu....
0x9edb453797374656d506172616d6574657273SystemParameters
0x9edc4496e666f4100000053686f7757696e64InfoA...ShowWind
0x9edd46f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0xa5630–0xa5720
0xa56306f0063006b00200049006e0069007400o.c.k. .I.n.i.t.
0xa5640690061006c0069007a00610074006900i.a.l.i.z.a.t.i.
0xa56506f006e0020004500720072006f007200o.n. .E.r.r.o.r.
0xa56602e001200530065007400200053006900....S.e.t. .S.i.
0xa56707a006500200045007800630065006500z.e. .E.x.c.e.e.
⋯11 more rows
Execute shell command (ShellExecuteA) 0xa5824–0xa59f4
⋯13 more rows
0xa58f42e000000000000000000000000000000................
0xa590400000000000000000000000000000000................
0xa591400000000100049006e00610063007400......I.n.a.c.t.
0xa592469007600650020004300610070007400i.v.e. .C.a.p.t.
0xa593469006f006e00150049006e0061006300i.o.n...I.n.a.c.
0xa594474006900760065002000430061007000t.i.v.e. .C.a.p.
0xa5954740069006f006e002000540065007800t.i.o.n. .T.e.x.
0xa596474000f0049006e0066006f0020004200t...I.n.f.o. .B.
0xa5974610063006b00670072006f0075006e00a.c.k.g.r.o.u.n.
0xa59846400090049006e0066006f0020005400d...I.n.f.o. .T.
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.