Benign Download

Backdoor.Win32.Small.dl

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256ac77c59a43b359b18315cd201c0b95aca8b734a90764a5ba46cbb8c937f25c81
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x11c7c0–0x11c860
0x11c7c0654d65737361676500005472616e736ceMessage..Transl
0x11c7d06174654d4449537973416363656c0000ateMDISysAccel..
0x11c7e0547261636b506f7075704d656e750000TrackPopupMenu..
0x11c7f053797374656d506172616d6574657273SystemParameters
0x11c800496e666f4100000053686f7757696e64InfoA...ShowWind
0x11c8106f77000053686f775363726f6c6c4261ow..ShowScrollBa
⋯5 more rows
Query/set system parameters (symbol) 0x11e50c–0x11e6ec
0x11e50c00000000000000000000000000000000................
0x11e51c00000000000000000000000000000000................
0x11e52c00000000000000000000000000000000................
0x11e53c00000000000000000000000000000000................
0x11e54c00000000000000000000000000000000................
⋯26 more rows
Execute shell command (ShellExecuteA) 0x11e70c–0x11e91c
⋯17 more rows
0x11e81c00000000000000000000000000000000................
0x11e82c00000000000000000000000000000000................
0x11e83c00000000000000000000000000000000................
0x11e84c00000000000000000000000000000000................
⋯3 more rows
0x11e88c00000000000000000000000000000000................
0x11e89c00000000000000000000000000000000................
0x11e8ac00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.