?ErrorCommon@@YGEPAG@Z
Feus_Yeah_Mace_Gilt_Paid_Iota_Roesow
Static task
static1
Behavioral task
behavioral1
Sample
ScriptA.ps1
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ScriptA.ps1
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
ScriptB.ps1
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
ScriptB.ps1
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
dropper.exe
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
dropper.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
payload.dll
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
payload.dll
Resource
win10v2004-20231023-en
Target
Poweliks.zip
Size
112KB
MD5
1a1c9e567fb8a496e59ec64a2053282d
SHA1
27f39f2299cd30763edf69ab4a0df7c9904ef40b
SHA256
069f8465baeaa5b1b95e68f68db2a98f59025b9fa88bbcb80fc775d0efd2d67d
SHA512
0c10250e43e4d46e2a82e3f592a453825efd9f6ab99bdf6a47b3a8d0d5ed5dff3a9224fae70111359274c81122e264e0a4eacb120678f71603b2b41f17e01ff0
SSDEEP
3072:7AE0TV7F0otlGdtMcjQYdyBVxsPRc3VOnpJZdj3WmLZOwg:kEaV7NGdtjjpqXsPRjnpF3WaZOwg
Checks for missing Authenticode signature.
resource |
---|
unpack001/dropper.ex_ |
unpack001/payload.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ord29
StrChrW
FindFirstFileA
IsDBCSLeadByteEx
LocalAlloc
GetExitCodeThread
GetProfileStringA
GetThreadPriority
lstrcmpiW
GetFileAttributesExW
GetStringTypeExA
GetVersion
GetFileInformationByHandle
GlobalAddAtomW
GetPrivateProfileSectionW
SetFileAttributesW
GetVolumeInformationW
ExitThread
GetEnvironmentVariableA
GetSystemDirectoryA
FileTimeToSystemTime
DeleteVolumeMountPointW
GetThreadContext
SizeofResource
OpenProcess
ReadConsoleW
GetTickCount
FlushConsoleInputBuffer
GetUserDefaultLCID
CreateDirectoryW
LoadLibraryExW
UnmapViewOfFile
GetStringTypeA
GetShortPathNameW
UnregisterClassW
RemovePropW
SwapMouseButton
UnloadKeyboardLayout
CloseWindowStation
LoadBitmapA
CharUpperA
IsCharAlphaW
WindowFromPoint
IsCharLowerA
GetWindowLongW
AppendMenuW
GetWindowLongA
GetClipboardData
GetWindowTextW
IsCharLowerW
GetClassInfoA
AppendMenuA
wvsprintfA
ClipCursor
DefDlgProcA
GetDialogBaseUnits
SetThreadDesktop
OffsetViewportOrgEx
CreateEllipticRgnIndirect
Escape
GetTextExtentExPointA
CreateCompatibleBitmap
PtInRegion
SetRectRgn
DeleteObject
ExcludeClipRect
CreateFontIndirectA
WidenPath
GetEnhMetaFileBits
SetViewportOrgEx
GetTextExtentPoint32A
PatBlt
SetDIBitsToDevice
CreatePolygonRgn
GetTextColor
?ErrorCommon@@YGEPAG@Z
Feus_Yeah_Mace_Gilt_Paid_Iota_Roesow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
atoi
recv
StrStrA
InternetCrackUrlA
UuidCreateSequential
CheckSumMappedFile
CreateEnvironmentBlock
RegCloseKey
CoInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE