Benign Download

Backdoor.Win32.Delf.ccz

Embedded PE binary at file offset 0x5ce0 (~538912 bytes)Image list icon size import
SHA-256c23a2870c5d0526eb1c5777a8c9bea9e98d1b6ca46a2c37fcdb3bf3849583bd4
MaleculeH₂(PoU)

Evidence

Embedded PE binary at file offset 0x5ce0 (~538912 bytes) 0x5ca0–0x5d70
⋯3 more rows
0x5cd0480045004900590049004e0047000000H.E.I.Y.I.N.G...
0x5ce04d5a50000200000004000f00ffff0000MZP.............
0x5cf0b80000000000000040001a0000000000........@.......
0x5d0000000000000000000000000000000000................
⋯7 more rows
Execute shell command (ShellExecuteA) 0x80f8–0x8248
⋯11 more rows
0x81a889d781e1ff000000f3a65f5ec38d4000.........._^..@.
0x81b8e903000000c38bc05331db85c07c4d0f........S1...|M.
0x81c8849a0000003d001400000f8d81000000.....=..........
0x81d889c283e21f8d1492dbac5393314000de..........S.1@..
⋯7 more rows
Query/set system parameters (string) 0x7b098–0x7b138
0x7b0986765000000005472616e736c6174654dge....TranslateM
0x7b0a84449537973416363656c000000005472DISysAccel....Tr
0x7b0b861636b506f7075704d656e7500000000ackPopupMenu....
0x7b0c853797374656d506172616d6574657273SystemParameters
0x7b0d8496e666f4100000053686f7757696e64InfoA...ShowWind
0x7b0e86f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.