Benign Download

Backdoor.Win32.Delf.hpo

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256db11123c53145c83dbdb708708d759b8625545367e03ea7d8917fc0c4260461f
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x710dc–0x7117c
0x710dc6765000000005472616e736c6174654dge....TranslateM
0x710ec4449537973416363656c000000005472DISysAccel....Tr
0x710fc61636b506f7075704d656e7500000000ackPopupMenu....
0x7110c53797374656d506172616d6574657273SystemParameters
0x7111c496e666f4100000053686f7757696e64InfoA...ShowWind
0x7112c6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x73570–0x73650
0x735704000000000000000ffffffffffffffff@...............
0x73580ffc007ffffc007fffe0007fffe0007ff................
0x73590f00007fff00007fff00007fff00007ff................
0x735a0f00007fff00007fff00007fff00007ff................
0x735b0f00007fff0003fff70003fff3001ffff......?.p.?.0...
⋯10 more rows
Execute shell command (ShellExecuteA) 0x7375c–0x7392c
⋯13 more rows
0x7382cff8410ffffc411ffffe413fffffc1fff................
0x7383cfffc1ffffffc1ffffffc1fffffffffff................
0x7384cffffffffffffffffffffffffffffffff................
0x7385cffffffff000000002800000020000000........(... ...
0x7386c40000000010001000000000080000000@...............
0x7387c00000000000000000000000000000000................
0x7388c00000000ffffff000000000000000000................
0x7389c00000000000000000000000000000000................
0x738ac0000000007fc000007fc000007fc0000................
0x738bc07fc000007fc0000073c000006dc0000.........<......
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.