Benign Download

Backdoor.Win32.Delf.alj

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256f092d513d5d8d4e52d90e547f555f03c27aa0e8dc8e535d6733d814c36454d2a
MaleculeH₂(PoU)

Evidence

Query/set system parameters (symbol) 0x94518–0x945f8
0x945183a5809004e5809000000000064580900:X..NX......dX..
0x94528765809008858090094580900a2580900vX...X...X...X..
0x94538b2580900c6580900dc580900f0580900.X...X...X...X..
0x94548085909001a5909003259090040590900.Y...Y..2Y..@Y..
0x9455850590900625909007059090084590900PY..bY..pY...Y..
⋯10 more rows
Execute shell command (ShellExecuteA) 0x947dc–0x948fc
⋯3 more rows
0x9480c000000005a6409006a64090000000000....Zd..jd......
0x9481c88640900a0640900b8640900ca640900.d...d...d...d..
0x9482cdc640900f66409001265090032650900.d...d...e..2e..
0x9483c486509005e6509007465090088650900He..^e..te...e..
0x9484c9e650900b2650900c6650900d8650900.e...e...e...e..
0x9485cf0650900086609002066090030660900.e...f.. f..0f..
0x9486c4a6609005e660900000000007e660900Jf..^f......~f..
0x9487c000000009a660900000000006b65726e.....f......kern
0x9488c656c33322e646c6c0000000044656c65el32.dll....Dele
⋯7 more rows
Query/set system parameters (string) 0x958ec–0x9598c
0x958ec6765000000005472616e736c6174654dge....TranslateM
0x958fc4449537973416363656c000000005472DISysAccel....Tr
0x9590c61636b506f7075704d656e7500000000ackPopupMenu....
0x9591c53797374656d506172616d6574657273SystemParameters
0x9592c496e666f4100000053686f7757696e64InfoA...ShowWind
0x9593c6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.