Benign Download

Trojan-Downloader.Win32.Dadobra.brp

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256c0ebd3310f77f301ee305865621341e40e8315d3fe33bc18a9736ed76ebc4d3e

Evidence

Query/set system parameters (string) 0x4ebda–0x4ec7a

0x4ebda6765000000005472616e736c6174654dge....TranslateM
0x4ebea4449537973416363656c000000005472DISysAccel....Tr
0x4ebfa61636b506f7075704d656e7500000000ackPopupMenu....
0x4ec0a53797374656d506172616d6574657273SystemParameters
0x4ec1a496e666f4100000053686f7757696e64InfoA...ShowWind
0x4ec2a6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x51420–0x51510

0x51420343138313c314031443148314c315c314181<1@1D1H1L1\1
0x514306c31703180319f31c031e031e831ec31l1p1.1.1.1.1.1.1
0x51440f031f431f831fc310032043208320c32.1.1.1.1.2.2.2.2
0x514501032143218321c322032243228324032.2.2.2.2 2$2(2@2
0x5146050325c32603268326c32703274327832P2\2`2h2l2p2t2x2
⋯11 more rows

Execute shell command (ShellExecuteA) 0x515f0–0x517b0

⋯12 more rows
0x516b0253656365d36de363c3777378737a737%6V6]6.6<7w7.7.7
0x516c0fd3860396739c539cc39e339ca3bde3b.8`9g9.9.9.9.;.;
0x516d0f63bfd3bcb3cec3cfb3c123dd23dd93d.;.;.<.<.<.=.=.=
0x516e05c3e683e7c3e843e883e8c3e903e943e\>h>|>.>.>.>.>.>
0x516f0983e9c3ea03ea43ea83eb63ebe3ed43e.>.>.>.>.>.>.>.>
0x51700f43efc3e003f043f083f0c3f103f143f.>.>.?.?.?.?.?.?
0x51710183f1c3f203ff33f0060010084000000.?.? ?.?.`......
0x517204e307e30c6300131ba31c731d231e131N0~0.0.1.1.1.1.1
0x51730f831083215322532ac32de32fe321b33.1.2.2%2.2.2.2.3
0x5174020333a333f33693375338433e433e933 3:3?3i3u3.3.3.3
⋯7 more rows