Benign Download

Worm.Win32.AutoRun.ea

Image list icon size import
SHA-256dc4f87c16754e6823c67fd4dca1f9e67b3bcd7f813289f96e364f0ced88ce914
MaleculeH(U)

Evidence

Query/set system parameters (string) 0x53972–0x53a12
0x539726765000000005472616e736c6174654dge....TranslateM
0x539824449537973416363656c000000005472DISysAccel....Tr
0x5399261636b506f7075704d656e7500000000ackPopupMenu....
0x539a253797374656d506172616d6574657273SystemParameters
0x539b2496e666f4100000053686f7757696e64InfoA...ShowWind
0x539c26f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x5444c–0x5452c
0x5444c654c6973745f44726167456e74657200eList_DragEnter.
0x5445c0000496d6167654c6973745f456e6444..ImageList_EndD
0x5446c726167000000496d6167654c6973745frag...ImageList_
0x5447c426567696e44726167000000496d6167BeginDrag...Imag
0x5448c654c6973745f52656d6f766500000000eList_Remove....
⋯10 more rows
Image list icon size import 0x54618–0x547a8
⋯12 more rows
0x546d800000000000000000000000000000000................
0x546e800000000000000000000000000000000................
0x546f800000000000000000000000000000000................
0x5470800000000000000000000000000000000................
⋯10 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.