Benign Download

Backdoor.Win32.Hupigon.fdyq

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256ebced8145ba875f279a4f4b78545faa027f3294a78f693fb92f925e260d174c7

Evidence

Query/set system parameters (string) 0x9cb6c–0x9cc0c

0x9cb6c6765000000005472616e736c6174654dge....TranslateM
0x9cb7c4449537973416363656c000000005472DISysAccel....Tr
0x9cb8c61636b506f7075704d656e7500000000ackPopupMenu....
0x9cb9c53797374656d506172616d6574657273SystemParameters
0x9cbac496e666f4100000053686f7757696e64InfoA...ShowWind
0x9cbbc6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x9f61c–0x9f70c

0x9f61cd43cd83cdc3ce03ce43ce83c123d293d.<.<.<.<.<.<.=)=
0x9f62c403d573d193e3d3ea43ee83e2a3f433f@=W=.>=>.>.>*?C?
0x9f63c5c3fdc3fe03fe43fe83fec3ff03ff43f\?.?.?.?.?.?.?.?
0x9f64cf83ffc3f002001007401000000300430.?.?. ..t....0.0
0x9f65c08300c301030143018301c3020302430.0.0.0.0.0.0 0$0
⋯11 more rows

Execute shell command (ShellExecuteA) 0x9f81c–0x9fa2c

⋯17 more rows
0x9f92c293c363c7e3c833c9d3ccb3cd73ce33c)<6<~<.<.<.<.<.<
0x9f93ced3cf33cfd3c083d123d1c3d2e3d433d.<.<.<.=.=.=.=C=
0x9f94c4f3d573d613d663d6b3d703d753d7b3dO=W=a=f=k=p=u={=
0x9f95c803d853d8b3d923d983d9f3da53dac3d.=.=.=.=.=.=.=.=
0x9f96cb23db93dbf3dc63dd83de83df03df83d.=.=.=.=.=.=.=.=
0x9f97c003e083e103e183e203e283e303e383e.>.>.>.> >(>0>8>
0x9f98c403e483e503e583e603e683e703e783e@>H>P>X>`>h>p>x>
0x9f99c803e883e903e983ea03ea83eb03eb83e.>.>.>.>.>.>.>.>
0x9f9acc03ec83ed03ed83ee03ee83ef03ef83e.>.>.>.>.>.>.>.>
0x9f9bc003f083f103f183f203f283f373f433f.?.?.?.? ?(?7?C?
⋯7 more rows