Benign Download

Trojan-Downloader.Win32.Banload.dck

Image list icon size importExecute shell command (ShellExecuteA)

SHA-2568aac45139e46608e0882d9a70c9347d75eb9f59cad59be545d3ba2d3ead46595

Evidence

Query/set system parameters (string) 0x542b2–0x54352

0x542b26765000000005472616e736c6174654dge....TranslateM
0x542c24449537973416363656c000000005472DISysAccel....Tr
0x542d261636b506f7075704d656e7500000000ackPopupMenu....
0x542e253797374656d506172616d6574657273SystemParameters
0x542f2496e666f4100000053686f7757696e64InfoA...ShowWind
0x543026f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x5642c–0x5650c

0x5642c3a303f30113172317f319a31a031b431:0?0.1r1.1.1.1.1
0x5643cb9319932be32cb32d632f7320d332533.1.2.2.2.2.2.3%3
0x5644c2a335f336e337b3386339933a633ee33*3_3n3{3.3.3.3.3
0x5645cf3330d343b34473453345d3463346d34.3.4;4G4S4]4c4m4
0x5646c783482348c349e34b334bf34c734d134x4.4.4.4.4.4.4.4
⋯10 more rows

Execute shell command (ShellExecuteA) 0x56608–0x567d8

⋯13 more rows
0x566d89c36a036a436a836ac36b036b436c036.6.6.6.6.6.6.6.6
0x566e8d036dc36e036e836ec36f036f436f836.6.6.6.6.6.6.6.6
0x566f8fc360037043708370c37103714371e37.6.7.7.7.7.7.7.7
0x567082237343745374937813785378937a137"747E7I7.7.7.7.7
0x56718b037b437bc37c037d037d837dc37e037.7.7.7.7.7.7.7.7
0x56728e437e837ec37f037f437f837fc370038.7.7.7.7.7.7.7.8
0x5673804380838163834384f38533864387938.8.8.848O8S8d8y8
0x567489c38a838ac38bc38c438c838cc38d038.8.8.8.8.8.8.8.8
0x56758d438d838dc38e038e438e838ec38f038.8.8.8.8.8.8.8.8
0x56768f438f838fc380039043908390c391039.8.8.8.9.9.9.9.9
⋯7 more rows