Benign Download

Trojan-Downloader.Win32.Agent.acjg

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256cd2122c4825d2dcdf7a0d22f5baa14ab1300856af066a975be2a40e5e16271bf

Evidence

Query/set system parameters (string) 0x664e6–0x66586

0x664e66765000000005472616e736c6174654dge....TranslateM
0x664f64449537973416363656c000000005472DISysAccel....Tr
0x6650661636b506f7075704d656e7500000000ackPopupMenu....
0x6651653797374656d506172616d6574657273SystemParameters
0x66526496e666f4100000053686f7757696e64InfoA...ShowWind
0x665366f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x6850c–0x685ec

0x6850c9c3aa03aa83aac3ab43ab83ac03ac43a.:.:.:.:.:.:.:.:
0x6851ccc3ad03ad83adc3ae43ae83af03af43a.:.:.:.:.:.:.:.:
0x6852cfc3a003b083b0c3b143b183b203b243b.:.;.;.;.;.; ;$;
0x6853c2c3b303b383b3c3b443b483b503b543b,;0;8;<;D;H;P;T;
0x6854c5c3b603b683b6c3b743b783b803b843b\;`;h;l;t;x;.;.;
⋯10 more rows

Execute shell command (ShellExecuteA) 0x6880c–0x6892c

⋯3 more rows
0x6883c873e963ead3eda3e613f703f913fa03f.>.>.>.>a?p?.?.?
0x6884cb73fc63fdd3fec3f00000100b4000000.?.?.?.?........
0x6885c03301230293038304f305e3072308130.0.0)080O0^0r0.0
0x6886c9230c430d330ea3065318a31ae31e531.0.0.0.0e1.1.1.1
0x6887cf331023219328834a337b137a738c938.1.2.2.4.7.7.8.8
0x6888ccd38d138d538d938dd38e138e538e938.8.8.8.8.8.8.8.8
0x6889ced38f138f538f938fd38013905390939.8.8.8.8.8.9.9.9
0x688ac0d391139153919391d39333a543aa03a.9.9.9.9.93:T:.:
0x688bcb93ad33afc3a213b483b6d3b943bb93b.:.:.:!;H;m;.;.;
⋯7 more rows