Benign Download

Backdoor.Win32.Antilam.14.i

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256a82974f624d7d6ef164a3fd439d5f80d2fb70a0dfb0e90af2ac48e8625742953
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x94daa–0x94e4a
0x94daa654d65737361676500005472616e736ceMessage..Transl
0x94dba6174654d4449537973416363656c0000ateMDISysAccel..
0x94dca547261636b506f7075704d656e750000TrackPopupMenu..
0x94dda53797374656d506172616d6574657273SystemParameters
0x94dea496e666f4100000053686f7757696e64InfoA...ShowWind
0x94dfa6f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Execute shell command (ShellExecuteA) 0x964d0–0x967c0
0x964d000000000000000000000000000000000................
0x964e000000000000000000000000000000000................
0x964f000000000000000000000000000000000................
0x9650000000000000000000000000000000000................
0x9651000000000000000000000000000000000................
⋯40 more rows
0x967a000000000000000000000000000000000................
0x967b000000000000000000000000000000000................
0x967c000000000000000000000000000000000................

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.