Benign Download

Trojan-Clicker.Win32.Agent.bbz

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256b44b68a4d62c34e5176efe70175902cb5f4d730dfe099c39b08fba5c5ecb7d78

Evidence

Query/set system parameters (string) 0x9bde2–0x9be82

0x9bde26765000000005472616e736c6174654dge....TranslateM
0x9bdf24449537973416363656c000000005472DISysAccel....Tr
0x9be0261636b506f7075704d656e7500000000ackPopupMenu....
0x9be1253797374656d506172616d6574657273SystemParameters
0x9be22496e666f4100000053686f7757696e64InfoA...ShowWind
0x9be326f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x9e51c–0x9e60c

0x9e51cab38b138b838be38c538cb38d238e438.8.8.8.8.8.8.8.8
0x9e52cf438fc3804390c3914391c3924392c39.8.8.9.9.9.9$9,9
0x9e53c34393c3944394c3954395c3964396c3949<9D9L9T9\9d9l9
0x9e54c74397c3984398c3994399c39a439ac39t9|9.9.9.9.9.9.9
0x9e55cb439bc39c439cc39d439dc39e439ec39.9.9.9.9.9.9.9.9
⋯11 more rows

Execute shell command (ShellExecuteA) 0x9e704–0x9e8f4

⋯15 more rows
0x9e7f40b3d1c3d2c3d383d3c3d443d483d4c3d.=.=,=8=<=D=H=L=
0x9e804503d543d583d5c3d603d643d683d6c3dP=T=X=\=`=d=h=l=
0x9e814703d743d783d7c3d803d843d8e3d923dp=t=x=|=.=.=.=.=
0x9e824a83dbd3dc13dd43de03de43df03df43d.=.=.=.=.=.=.=.=
0x9e834fc3d003e043e083e0c3e103e143e183e.=.>.>.>.>.>.>.>
0x9e8441c3e203e243e283e2c3e303e343e383e.> >$>(>,>0>4>8>
0x9e8543c3e403e443e523e643e683e6c3e703e<>@>D>R>d>h>l>p>
0x9e864803e913e953ea83eb83ec43ec83ed03e.>.>.>.>.>.>.>.>
0x9e874d43ed83edc3ee03ee43ee83eec3ef03e.>.>.>.>.>.>.>.>
0x9e884f43ef83efc3e003f043f083f0c3f103f.>.>.>.?.?.?.?.?
⋯7 more rows