Benign Download

Trojan-Downloader.Win32.Banload.jvx

Image list icon size importExecute shell command (ShellExecuteA)

SHA-256fbd9f5cb1b281848874efb67e8d68ac95d9b72841c1364d96ba85499b2fe6994

Evidence

Query/set system parameters (string) 0x4e37e–0x4e41e

0x4e37e6765000000005472616e736c6174654dge....TranslateM
0x4e38e4449537973416363656c000000005472DISysAccel....Tr
0x4e39e61636b506f7075704d656e7500000000ackPopupMenu....
0x4e3ae53797374656d506172616d6574657273SystemParameters
0x4e3be496e666f4100000053686f7757696e64InfoA...ShowWind
0x4e3ce6f770000000053686f775363726f6c6cow....ShowScroll
⋯5 more rows

Query/set system parameters (symbol) 0x50400–0x504e0

0x504000c3e113ef13e163f233f2e3f4f3f653f.>.>.>.?#?.?O?e?
0x504107d3f823fb73fc63fd33fde3ff13ffe3f}?.?.?.?.?.?.?.?
0x5042000000100d401000046304b3065309330........F0K0e0.0
0x504309f30ab30b530bb30c530d030da30e430.0.0.0.0.0.0.0.0
0x50440f6300b3117311f3129312e3133313831.0.1.1.1)1.13181
⋯10 more rows

Execute shell command (ShellExecuteA) 0x505cc–0x5078c

⋯12 more rows
0x5068c4c325032543258325c32603264326832L2P2T2X2\2`2d2h2
0x5069c78329832a032a432a832ac32b032b432x2.2.2.2.2.2.2.2
0x506acb832bc32c032cc32dc32e832ec32f432.2.2.2.2.2.2.2.2
0x506bcf832fc320033043308330c3310331433.2.2.3.3.3.3.3.3
0x506cc18331c3320332a332e33403351335533.3.3 3*3.3@3Q3U3
0x506dc8d3391339533ad33bc33c033c833cc33.3.3.3.3.3.3.3.3
0x506ecdc33e433e833ec33f033f433f833fc33.3.3.3.3.3.3.3.3
0x506fc0034043408340c341034143422344034.4.4.4.4.4.4"4@4
0x5070c5b345f3470348534a834b434b834c834[4_4p4.4.4.4.4.4
0x5071cd034d434d834dc34e034e434e834ec34.4.4.4.4.4.4.4.4
⋯7 more rows