Benign Download

Trojan-Downloader.Win32.Banload.obm

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256b78b3047ffff02d0a6662b3ce164026a5144086d7f774436f1a87a308e34c34a

Evidence

Query/set system parameters (string) 0x4e58e–0x4e62e

0x4e58e6765000000005472616e736c6174654dge....TranslateM
0x4e59e4449537973416363656c000000005472DISysAccel....Tr
0x4e5ae61636b506f7075704d656e7500000000ackPopupMenu....
0x4e5be53797374656d506172616d6574657273SystemParameters
0x4e5ce496e666f4100000053686f7757696e64InfoA...ShowWind
0x4e5de6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x50404–0x504e4

0x50404f43ffc3f00e000006c01000000300430.?.?....l....0.0
0x5041408300c301030143018301c3038305830.0.0.0.0.0.080X0
0x504246030643068306c307030743078307c30`0d0h0l0p0t0x0|0
0x5043480309c30bc30c430c830cc30d030d430.0.0.0.0.0.0.0.0
0x50444d830dc30e030e4300031203128312c31.0.0.0.0.1 1(1,1
⋯10 more rows

Execute shell command (ShellExecuteA) 0x505d0–0x50790

⋯12 more rows
0x5069068337d3392339733a433c433de33e333h3}3.3.3.3.3.3.3
0x506a0b534163523353e35443558355d353d36.4.5#5>5D5X5]5=6
0x506b062366f367a369b36b136c936ce360337b6o6z6.6.6.6.6.7
0x506c012371f372a373d374a3792379737b137.7.7*7=7J7.7.7.7
0x506d0df37eb37f7370138073811381c382638.7.7.7.8.8.8.8&8
0x506e030384238573863386b3875387a387f3808B8W8c8k8u8z8.8
0x506f0843889388f38943899389f38a638ac38.8.8.8.8.8.8.8.8
0x50700b338b938c038c638cd38d338da38ec38.8.8.8.8.8.8.8.8
0x50710fc3804390c3914391c3924392c393439.8.9.9.9.9$9,949
0x507203c3944394c3954395c3964396c397439<9D9L9T9\9d9l9t9
⋯7 more rows