PowerISO[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PowerISO.exe
Size

6.1MB
MD5

b35ca1fe32c0952f756dfec1cd894dd5
SHA1

8ecdfbb4333eeb0b7c0df4fd0c9dc58f17d63257
SHA256

b6cb074ad499926bf8aaee9d7caf993739fbbce5cf19bbbc912c95c5f1111aa0
SHA512

8d80a7dcc32bea19cad8cf775fb98f60f5befbf4e1300a9bf6ad1ca49347653cdbb9860a912d36ee05279aece88795336408ed4f4572515c54d4e18ab792d893
SSDEEP

196608:Iu7QnauG0sBtE7xOD2rNdpT/S68dP3eC8:Iu7Qna50sBtmxOD2r7xL8C

Score

1^/10

Malware Config

Signatures

Files

PowerISO.exe
.exe windows:4 windows x64 arch:x64

9e5a36df18c50be553716c2181253bf4

Code Sign

20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/03/2023, 04:13

Not After

08/03/2026, 04:13

Subject

CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/03/2023, 04:13

Not After

08/03/2026, 04:13

Subject

CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:e6:71:6b:61:94:b7:7a:8d:c5:43:6a:80:42:44:6d:57:03:0e:41:42:53:d3:6b:76:19:95:2d:a7:a9:4e:a1
Signer

Actual PE Digest

9a:e6:71:6b:61:94:b7:7a:8d:c5:43:6a:80:42:44:6d:57:03:0e:41:42:53:d3:6b:76:19:95:2d:a7:a9:4e:a1

Digest Algorithm

sha256

PE Digest Matches

true

69:c2:23:8d:9d:a7:3c:5c:10:de:7c:87:28:15:6b:d6:64:e3:9e:40
Signer

Actual PE Digest

69:c2:23:8d:9d:a7:3c:5c:10:de:7c:87:28:15:6b:d6:64:e3:9e:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LCMapStringW
LCMapStringA
HeapCreate
HeapSetInformation
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
HeapSize
GetFileType
RtlPcToFileHeader
RaiseException
GetCurrentDirectoryA
HeapReAlloc
RtlUnwindEx
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
SetErrorMode
GetTimeZoneInformation
GetProcessVersion
TlsFree
LocalReAlloc
GlobalReAlloc
GlobalFlags
GetProfileIntW
GlobalGetAtomNameW
lstrcpyW
UnlockFile
LockFile
GlobalAddAtomW
GlobalFindAtomW
GetModuleHandleA
lstrcatW
GetVersionExA
FreeResource
WritePrivateProfileStringW
lstrlenA
lstrcmpW
GlobalDeleteAtom
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
GetStringTypeA
GetStringTypeW
SetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetDriveTypeA
CompareStringA
CompareStringW
lstrlenW
GetFileInformationByHandle
MoveFileExW
TlsAlloc
DosDateTimeToFileTime
TlsSetValue
TlsGetValue
GetVersionExW
RemoveDirectoryW
GetSystemDirectoryW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
VirtualProtect
WinExec
CopyFileW
GetTempPathW
CreatePipe
DuplicateHandle
GetCurrentDirectoryW
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
GlobalSize
SetCurrentDirectoryW
GetCurrentProcessId
OpenEventW
GetLongPathNameW
GetSystemWindowsDirectoryW
ExitThread
CreateProcessW
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileTime
GlobalHandle
LoadLibraryExW
FormatMessageW
LoadLibraryA
GetCurrentProcess
GetVersion
GetFullPathNameW
DefineDosDeviceW
SetFileTime
ResetEvent
WriteFile
FlushFileBuffers
QueryDosDeviceW
CloseHandle
CreateDirectoryW
SetFileAttributesW
MoveFileW
SuspendThread
ResumeThread
lstrcmpiW
FreeLibrary
lstrcpynW
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetFileAttributesW
GetThreadPriority
GetFileAttributesExW
GetLogicalDriveStringsW
GetTempFileNameW
SetThreadExecutionState
GetLogicalDrives
LocalAlloc
LocalFree
CreateEventA
DeviceIoControl
GetOverlappedResult
CreateEventW
CreateThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
MulDiv
GetSystemDefaultLangID
SetFilePointer
GetFileSize
GetCurrentThread
SetThreadPriority
SetEndOfFile
GetTickCount
GetLastError
SetLastError
ReadFile
MultiByteToWideChar
WideCharToMultiByte
FindNextFileW
WaitForSingleObject
Sleep
GetLocaleInfoW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
FindClose
DeleteFileW
CreateFileW
GetCurrentThreadId
ExitProcess
InitializeCriticalSection
LoadLibraryW
GetProcAddress
GetModuleHandleW
CreateMutexW
GetVolumeInformationW
GetDiskFreeSpaceExW
DeleteCriticalSection
FindResourceExW
SetEnvironmentVariableA

user32

OffsetRect
DrawEdge
GetWindowDC
DrawStateW
CreateIconIndirect
GetClassNameW
OpenClipboard
CloseClipboard
EmptyClipboard
GetDCEx
PostThreadMessageW
WindowFromPoint
TrackPopupMenuEx
ModifyMenuW
LoadImageW
RegisterClipboardFormatW
IsZoomed
SetMenu
GetKeyboardLayout
IsRectEmpty
IntersectRect
CreateCaret
SetCaretPos
HideCaret
ShowCaret
DestroyCaret
DrawIconEx
SendMessageA
SetClassLongPtrW
MessageBoxIndirectW
CharUpperW
ShowScrollBar
FindWindowW
InsertMenuW
RemoveMenu
BroadcastSystemMessage
GetSystemMenu
GetClipboardData
IsClipboardFormatAvailable
EqualRect
EndDeferWindowPos
BeginDeferWindowPos
GetKeyState
GetCapture
GetMessagePos
GetDesktopWindow
LoadStringW
SetRect
SetParent
UnpackDDElParam
ReuseDDElParam
SetClipboardData
GetIconInfo
ShowWindow
SetFocus
GrayStringW
TabbedTextOutW
DestroyIcon
SystemParametersInfoW
GetScrollInfo
IsWindow
PtInRect
ReleaseCapture
GetFocus
SetCapture
SetMenuDefaultItem
ClientToScreen
CheckMenuRadioItem
GetMenuItemID
EnableMenuItem
CreatePopupMenu
SetWindowsHookExW
CallNextHookEx
SetDlgItemTextW
GetWindowPlacement
MessageBoxW
CopyRect
UnhookWindowsHookEx
MoveWindow
GetClassInfoExW
RegisterClassExW
CreateWindowExW
SetPropW
SetWindowLongPtrW
RemovePropW
GetDlgItem
SetWindowPos
GetParent
InflateRect
DrawFrameControl
GetSysColorBrush
FrameRect
DrawTextW
DrawFocusRect
GetWindowLongPtrW
GetPropW
CallWindowProcW
InvalidateRgn
DefWindowProcW
SetForegroundWindow
PostMessageW
MessageBeep
IsWindowVisible
GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
LockWindowUpdate
GetSysColor
RedrawWindow
LoadBitmapW
FillRect
GetWindowLongW
SetWindowLongW
GetCursorPos
ScreenToClient
SetCursor
LoadCursorW
KillTimer
SetTimer
EnableWindow
GetWindowRect
LoadMenuW
GetMenuStringW
GetMenuItemInfoW
SetMenuItemInfoW
GetDlgCtrlID
SetWindowTextW
EnumChildWindows
GetWindowTextW
InvalidateRect
GetSubMenu
GetMenuItemCount
CheckMenuItem
ReleaseDC
LoadIconW
SendMessageW
UpdateWindow
GetDC
MessageBoxA
UnregisterClassW
PostQuitMessage
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
PeekMessageW
ValidateRect
DispatchMessageW
TranslateMessage
GetMessageW
GetActiveWindow
GetMenuCheckMarkDimensions
GetMenuState
GetNextDlgTabItem
SetMenuItemBitmaps
CheckRadioButton
SendDlgItemMessageW
IsDlgButtonChecked
IsDialogMessageW
GetWindowTextLengthW
wsprintfW
EndDialog
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
DestroyMenu
GetWindow
SystemParametersInfoA
RegisterClassW
GetClassInfoW
SetScrollInfo
DeferWindowPos
AdjustWindowRectEx
GetMenu
MapWindowPoints
GetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
GetTopWindow
ScrollWindow
GetMessageTime
IsChild
SendDlgItemMessageA
WinHelpW
RegisterWindowMessageW
BeginPaint
EndPaint
wvsprintfW
SetRectEmpty
GetAsyncKeyState
MapDialogRect
SetCursorPos
DestroyCursor
TranslateAcceleratorW
BringWindowToTop
LoadAcceleratorsW

advapi32

RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
RegSetValueW
LookupAccountNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetNamedSecurityInfoW
DeleteAce
EqualSid
GetAce
GetAclInformation
RegUnLoadKeyW
RegLoadKeyW

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHChangeNotify
SHGetMalloc
SHGetDesktopFolder
DragQueryFileW
DragFinish
Shell_NotifyIconW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
DragAcceptFiles

gdi32

SetBkColor
SetTextColor
ExtTextOutW
CreateDIBSection
GetObjectW
CreateCompatibleBitmap
StretchBlt
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
CreateICW
DeleteDC
CreateFontIndirectW
CreateSolidBrush
GetDeviceCaps
EnumFontFamiliesExW
ScaleWindowExtEx
GetBkColor
GetTextMetricsW
GetStockObject
CreatePen
GetTextExtentPoint32W
CreateBitmap
Ellipse
CreateRectRgn
Rectangle
RoundRect
CreateDIBitmap
LineTo
MoveToEx
CreateRectRgnIndirect
SetRectRgn
TranslateCharsetInfo
SetBoundsRect
SetBkMode
PolyPolyline
CopyMetaFileW
LPtoDP
CombineRgn
CreateFontW
GetCharWidthW
StretchDIBits
CreatePatternBrush
PtVisible
RectVisible
TextOutW
Escape
SetDIBits
GetDIBits
GetPixel
SetPixel
SetStretchBltMode
GetTextColor
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
GetClipBox
PatBlt

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
ChooseFontW

winmm

mciSendCommandW
mciGetErrorStringW
waveOutOpen
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutClose
waveOutReset
mixerGetDevCapsW
mixerOpen
mixerGetNumDevs
mixerClose
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetControlDetailsW
mixerSetControlDetails
waveOutGetDevCapsW

rpcrt4

UuidFromStringW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comctl32

ImageList_Create
CreatePropertySheetPageW
DestroyPropertySheetPage
PropertySheetW
ord17
ImageList_AddMasked
ImageList_Add
_TrackMouseEvent
ImageList_Destroy
ImageList_SetBkColor
ImageList_ReplaceIcon

oledlg

OleUIBusyW

ole32

CoTaskMemFree
OleGetClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
PropVariantClear
CoCreateGuid
ReleaseStgMedium
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
OleSetClipboard
OleIsCurrentClipboard
CoLockObjectExternal
RevokeDragDrop
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
OleDuplicateData
DoDragDrop
RegisterDragDrop
OleInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
SysStringByteLen
OleLoadPicture

wininet

HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetAttemptConnect

Sections

.text
Size: 2.4MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

TEXT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 549KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e5a36df18c50be553716c2181253bf4

Code Sign

20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

9a:e6:71:6b:61:94:b7:7a:8d:c5:43:6a:80:42:44:6d:57:03:0e:41:42:53:d3:6b:76:19:95:2d:a7:a9:4e:a1Signer

69:c2:23:8d:9d:a7:3c:5c:10:de:7c:87:28:15:6b:d6:64:e3:9e:40Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

gdi32

comdlg32

winmm

rpcrt4

winspool.drv

comctl32

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 2.4MB - Virtual size: 2.3MB

TEXT Size: 4KB - Virtual size: 3KB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 1.2MB - Virtual size: 2.6MB

.pdata Size: 175KB - Virtual size: 175KB

.rsrc Size: 549KB - Virtual size: 548KB

20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

9a:e6:71:6b:61:94:b7:7a:8d:c5:43:6a:80:42:44:6d:57:03:0e:41:42:53:d3:6b:76:19:95:2d:a7:a9:4e:a1
Signer

69:c2:23:8d:9d:a7:3c:5c:10:de:7c:87:28:15:6b:d6:64:e3:9e:40
Signer

.text
Size: 2.4MB - Virtual size: 2.3MB

TEXT
Size: 4KB - Virtual size: 3KB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 1.2MB - Virtual size: 2.6MB

.pdata
Size: 175KB - Virtual size: 175KB

.rsrc
Size: 549KB - Virtual size: 548KB