Benign Download

Backdoor.Win32.Delf.zm

Image list icon size import
SHA-256d998070b210db9297f94de2ae518bb61ab54fd9e7923866eeed50d64070ff075
MaleculeH(U)

Evidence

Query/set system parameters (string) 0x5e29c–0x5e33c
0x5e29c6765000000005472616e736c6174654dge....TranslateM
0x5e2ac4449537973416363656c000000005472DISysAccel....Tr
0x5e2bc61636b506f7075704d656e7500000000ackPopupMenu....
0x5e2cc53797374656d506172616d6574657273SystemParameters
0x5e2dc496e666f4100000053686f7757696e64InfoA...ShowWind
0x5e2ec6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x60488–0x60578
0x6048800c2c200000000c2c2000000000000c2................
0x60498c2c200000000c2c20000c2c2000000ff................
0x604a800c2feedc2c2c2c2c2ff000000c2c2c2................
0x604b8c2c20000c2c2c2c2c2c2c20000000000................
0x604c8000000000000000000000000000000ff................
⋯11 more rows
Image list icon size import 0x6066c–0x6080c
⋯13 more rows
0x6073c0000fe19191919191919191900fff6f6................
0x6074cf6f6fefffbf600ff130007feffff2828..............((
0x6075c2828ff0000000000000000ffff191919((..............
0x6076c191919191cff19ff001919191919f6f6................
⋯10 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.