Benign Download

Trojan-Clicker.Win32.Galepo.bu

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2569ecb3ff6ec0e2c3cb1265e672408e3f014afd5916c06723b9486b9dd77028ef5
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x801da–0x8027a
0x801da654d65737361676500005472616e736ceMessage..Transl
0x801ea6174654d4449537973416363656c0000ateMDISysAccel..
0x801fa547261636b506f7075704d656e750000TrackPopupMenu..
0x8020a53797374656d506172616d6574657273SystemParameters
0x8021a496e666f4100000053686f7757696e64InfoA...ShowWind
0x8022a6f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Query/set system parameters (symbol) 0x824dc–0x826ac
0x824dc00000000000000000000000000000000................
0x824ec00000000000000000000000000000000................
0x824fc00000000000000000000000000000000................
0x8250c00000000000000000000000000000000................
0x8251c00000000000000000000000000000000................
⋯25 more rows
Execute shell command (ShellExecuteA) 0x827cc–0x828ec
⋯3 more rows
0x827fc00000000000000000000000000000000................
0x8280c00000000000000000000000000000000................
0x8281c00000000000000000000000000000000................
0x8282c00000000000000000000000000000000................
0x8283c00000000000000000000000000000000................
0x8284c00000000000000000000000000000000................
0x8285c00000000000000000000000000000000................
0x8286c00000000000000000000000000000000................
0x8287c00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.