Benign Download

Backdoor.Win32.Delf.mgx

Image list icon size importExecute shell command (ShellExecuteA)

SHA-2568ec6c0ea28d9fd46a45c59926e5fa1ff7ad9c5bc52c02b598c00b9601b4384c9

Evidence

Query/set system parameters (string) 0x6dfe8–0x6e088

0x6dfe86765000000005472616e736c6174654dge....TranslateM
0x6dff84449537973416363656c000000005472DISysAccel....Tr
0x6e00861636b506f7075704d656e7500000000ackPopupMenu....
0x6e01853797374656d506172616d6574657273SystemParameters
0x6e028496e666f4100000053686f7757696e64InfoA...ShowWind
0x6e0386f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x72570–0x72660

0x7257029382d383138383877387b387f388438)8-81888w8{8.8.8
0x72580b538b938c0382f39333937393b393f39.8.8.8/93979;9?9
0x7259043394839953999399d39a139a839f439C9H9.9.9.9.9.9.9
0x725a0f839fc39003a043a593a5d3a613a653a.9.9.:.:Y:]:a:e:
0x725b06c3ae33ae73aeb3aef3af33af73afc3al:.:.:.:.:.:.:.:
⋯11 more rows

Execute shell command (ShellExecuteA) 0x72758–0x72928

⋯14 more rows
0x728382e36323636363a363e36423646364a36.62666:6>6B6F6J6
0x728484e36523656365a365e36623666366a36N6R6V6Z6^6b6f6j6
0x728586e36723676367a367e36823686368a36n6r6v6z6~6.6.6.6
0x728688e36923696369a369e36a236a636aa36.6.6.6.6.6.6.6.6
0x72878ae36b236b636ba36be36c236c636ca36.6.6.6.6.6.6.6.6
0x72888ce36d236d636da36de36e236e636ea36.6.6.6.6.6.6.6.6
0x72898ee36f236f636fa36fe36023706370a37.6.6.6.6.6.7.7.7
0x728a80e37123716371a371e37223726372a37.7.7.7.7.7"7&7*7
0x728b82e37323736373a373e37423746374a37.72767:7>7B7F7J7
⋯7 more rows