Benign Download

Backdoor.Win32.Antilam.20.p

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256e8edfb6298b60bd3ace748a8c6211a1264ceb710268aad76a4e33d50fdd5bc6c
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0xbf70e–0xbf7ae
0xbf70e6765000000005472616e736c6174654dge....TranslateM
0xbf71e4449537973416363656c000000005472DISysAccel....Tr
0xbf72e61636b506f7075704d656e7500000000ackPopupMenu....
0xbf73e53797374656d506172616d6574657273SystemParameters
0xbf74e496e666f4100000053686f7757696e64InfoA...ShowWind
0xbf75e6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0xc1514–0xc1604
0xc151400000000cc4d0d00e401000000000000.....M..........
0xc152400000000b04f0d00d001000000000000.....O..........
0xc15340000000080510d00d001000000000000.....Q..........
0xc15440000000050530d00d001000000000000....PS..........
0xc15540000000020550d00d001000000000000.... U..........
⋯11 more rows
Execute shell command (ShellExecuteA) 0xc1650–0xc1910
⋯27 more rows
0xc18000000000000000000b01c0e003ee20000............>...
0xc18100000000000000000f0fe0e001d070000................
0xc1820000000000000000010060f003f110000............?...
0xc1830000000000000000050170f0082030000........P.......
⋯4 more rows
0xc1880000000000000000080340f00b8020000.........4......
0xc1890000000000000000038370f0048030000........87..H...
0xc18a00000000000000000803a0f0075020000.........:..u...
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.