Benign Download

Backdoor.Win32.BlackHole.2004.q

Embedded PE binary at file offset 0x34e4 (~4224 bytes)Image list icon size import
SHA-256d263714b057e3fff7dc47bc05515140aaf867308a22d66a0cf5a48f276a8b52e
MaleculeH(U)

Evidence

Query/set system parameters (string) 0x1d3a–0x1dda
0x1d3a6765000000005472616e736c6174654dge....TranslateM
0x1d4a4449537973416363656c000000005472DISysAccel....Tr
0x1d5a61636b506f7075704d656e7500000000ackPopupMenu....
0x1d6a53797374656d506172616d6574657273SystemParameters
0x1d7a496e666f4100000053686f7757696e64InfoA...ShowWind
0x1d8a6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Embedded PE binary at file offset 0x34e4 (~4224 bytes) 0x34a4–0x3574
⋯3 more rows
0x34d49c3b1200450200000000000000000000.;..E...........
0x34e44d5a90000300000004000000ffff0000MZ..............
0x34f4b8000000000000004000000000000000........@.......
0x350400000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.