Benign Download

Trojan-PSW.Win32.Steam.fk

Image list icon size importExecute shell command (ShellExecuteA)
SHA-256fa1ff4319d5c86330033504519b7acd17ff23780aca103fae1894822d057eb08
MaleculeH₂(PoU)

Evidence

Query/set system parameters (string) 0x777b8–0x77858
0x777b86765000000005472616e736c6174654dge....TranslateM
0x777c84449537973416363656c000000005472DISysAccel....Tr
0x777d861636b506f7075704d656e7500000000ackPopupMenu....
0x777e853797374656d506172616d6574657273SystemParameters
0x777f8496e666f4100000053686f7757696e64InfoA...ShowWind
0x778086f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows
Query/set system parameters (symbol) 0x7d84c–0x7d93c
0x7d84c1a3f203f283fae3fbe3fcb3fd43fda3f.? ?(?.?.?.?.?.?
0x7d85ce43fea3ff23f000000c0030018010000.?.?.?..........
0x7d86c0030053011301b30213029304a305230.0.0.0.0!0)0J0R0
0x7d87c63308130a430b230cc30eb30f9300831c0.0.0.0.0.0.0.1
0x7d88c3e31e5310232183220322e3240325032>1.1.2.2 2.2@2P2
⋯11 more rows
Execute shell command (ShellExecuteA) 0x7dd24–0x7de54
⋯3 more rows
0x7dd54be3ccf3ce73cff3c103d283dbd3d7f3e.<.<.<.<.=(=.=.>
0x7dd64f93e173f00a004003c0000000b307630.>.?....<....0v0
0x7dd74c230f230cf3103324c325c32ff326c33.0.0.1.2L2\2.2l3
0x7dd848633c1340a35683597357d38b439303b.3.4.5h5.5}8.90;
0x7dd945e3b7c3c813cfd3c3b3d5a3d6c3da03e^;|<.<.<;=Z=l=.>
0x7dda400b0040070010000063056300c315331....p....0V0.1S1
0x7ddb45d31673171317b318531323266328332]1g1q1{1.122f2.2
0x7ddc48633a533b133b933c533d033d633e233.3.3.3.3.3.3.3.3
0x7ddd4ec33f233fe3303340e34133418342334.3.3.3.4.4.4.4#4
0x7dde428342d3438343d3442344d3452345734(4-484=4B4M4R4W4
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.