General

  • Target

    PowerDocu-v.2.0.1-selfcontained.zip

  • Size

    70.6MB

  • MD5

    2cf127b44221c21be41c3d6665898b9e

  • SHA1

    c064f7d20f7189766aaea1e58482e8b98e819d5f

  • SHA256

    e823a2108df3bcbe20e3d5fa3c4c078eb90b5f86126e80a5f7b9f682a56570fa

  • SHA512

    b0dbf976a504bf4b5919f3290203b3e9fa71d80f80bee830d49a05e63ecbb02e9137d547aaa80f04ce3d4b64dc42e004f4c58c67512e53d443e332691e8a0e37

  • SSDEEP

    1572864:oBXplUrvKLC4z2Jet34pEy5RCVx5aHCRGyTFx4p1v3YK/mrxA3ctXNp3r0LbOpMe:oBXrPJKyopEWCz5GoxuxwS3cJNpcOue

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://powerautomate.microsoft.com/en-us/api/connectors/all/

Signatures

  • Unsigned PE 61 IoCs

    Checks for missing Authenticode signature.

Files

  • PowerDocu-v.2.0.1-selfcontained.zip
    .zip
  • D3DCompiler_47_cor3.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GraphvizWrapper.dll
    .dll windows:6 windows x64 arch:x64

    6b498ca904f19e4161ad772ea11856fe


    Headers

    Imports

    Exports

    Sections

  • GraphvizWrapper.exp
  • GraphvizWrapper.lib
  • GraphvizWrapper.pdb
  • Icons\PowerDocu.ico
  • Pathplan.dll
    .dll windows:6 windows x64 arch:x64

    254c53f23f1dedad55359f112fae424f


    Headers

    Imports

    Exports

    Sections

  • PenImc_cor3.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    4093c03428ffebcedcb974ab93290ca8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerDocu.exe
    .exe windows:6 windows x64 arch:x64

    7d82737f015fa3a1a4cef33dc096d571


    Headers

    Imports

    Exports

    Sections

  • PresentationNative_cor3.dll
    .dll windows:6 windows x64 arch:x64

    a09c9abadde79aec9926dc99ee900a1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources\ConnectorIcons\GenerateConnectorMapping.ps1
    .ps1
  • Resources\ConnectorIcons\connectors.json
  • Resources\DefaultSettings\AppDefaultSetting.json
  • Resources\DefaultSettings\ControlDefaultSetting.json
  • Resources\DefaultSettings\ScreenDefaultSetting.json
  • Resources\security-role-access-level-basic.png
    .png
  • Resources\security-role-access-level-deep.png
    .png
  • Resources\security-role-access-level-global.png
    .png
  • Resources\security-role-access-level-local.png
    .png
  • Resources\security-role-access-level-none.png
    .png
  • Resources\styles.xml
    .xml
  • acyclic.exe
    .exe windows:6 windows x64 arch:x64

    d2c4f97f826bb00d15c02fa51a33dc31


    Headers

    Imports

    Sections

  • bcomps.exe
    .exe windows:6 windows x64 arch:x64

    2aa5bafd06a90211cc37a09e13735e84


    Headers

    Imports

    Sections

  • cairo.dll
    .dll windows:6 windows x64 arch:x64

    c3cb378aeac481c1ac33b5fd9893c3d1


    Headers

    Imports

    Exports

    Sections

  • ccomps.exe
    .exe windows:6 windows x64 arch:x64

    41a6967c198e721e3babf1186958373b


    Headers

    Imports

    Sections

  • cdt.dll
    .dll windows:6 windows x64 arch:x64

    a1a55494c4448823641c50606eef9406


    Headers

    Imports

    Exports

    Sections

  • cgraph++.dll
    .dll windows:6 windows x64 arch:x64

    356bd489d7d70dbc348329174797ae3c


    Headers

    Imports

    Exports

    Sections

  • cgraph.dll
    .dll windows:6 windows x64 arch:x64

    993a0ab0820a9e663237de9ea4b7cea6


    Headers

    Imports

    Exports

    Sections

  • circo.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • cluster.exe
    .exe windows:6 windows x64 arch:x64

    f3f99a89a37fc051583ecd75acae9c20


    Headers

    Imports

    Exports

    Sections

  • config6
  • dijkstra.exe
    .exe windows:6 windows x64 arch:x64

    78f3ebfa29fc0204b12b2893f0e4573d


    Headers

    Imports

    Sections

  • dot.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • dot2gxl.exe
    .exe windows:6 windows x64 arch:x64

    910b3329891793826ca70f526ef09429


    Headers

    Imports

    Sections

  • dot_builtins.exe
    .exe windows:6 windows x64 arch:x64

    1272125f9b0576d31bc7ed99257566ea


    Headers

    Imports

    Sections

  • edgepaint.exe
    .exe windows:6 windows x64 arch:x64

    5bbad7304ca1e950cf3e6015ae51f50f


    Headers

    Imports

    Exports

    Sections

  • expat.dll
    .dll windows:6 windows x64 arch:x64

    3395832b38df8b64cd58112ea5380c54


    Headers

    Imports

    Exports

    Sections

  • fdp.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • fontconfig.dll
    .dll windows:6 windows x64 arch:x64

    c09526835d1cd44ecad6df89e614787a


    Headers

    Imports

    Exports

    Sections

  • gc.exe
    .exe windows:6 windows x64 arch:x64

    cd13298d80c00cb6ab1acc9648f984a8


    Headers

    Imports

    Sections

  • getopt.dll
    .dll windows:6 windows x64 arch:x64

    d241e1ebf18aef97a56fa5ddeaf11c4c


    Headers

    Imports

    Exports

    Sections

  • glib-2.dll
    .dll windows:6 windows x64 arch:x64

    2bb2def0860cc5a78efbfe4d798cec79


    Headers

    Imports

    Exports

    Sections

  • gml2gv.exe
    .exe windows:6 windows x64 arch:x64

    2a0d45ad89dffc0ac9ac649e228b1370


    Headers

    Imports

    Sections

  • gobject-2.dll
    .dll windows:6 windows x64 arch:x64

    99973d66337e3f5aa65291b8f1c4dc57


    Headers

    Imports

    Exports

    Sections

  • graphml2gv.exe
    .exe windows:6 windows x64 arch:x64

    40d36a9ce77c436cf0ba32b44bcc115a


    Headers

    Imports

    Sections

  • gv2gml.exe
    .exe windows:6 windows x64 arch:x64

    07735baf512130c121cdb9ce94fd1e17


    Headers

    Imports

    Sections

  • gv2gxl.exe
    .exe windows:6 windows x64 arch:x64

    910b3329891793826ca70f526ef09429


    Headers

    Imports

    Sections

  • gvc++.dll
    .dll windows:6 windows x64 arch:x64

    0e8802767367ca1344c93693cb6d0905


    Headers

    Imports

    Exports

    Sections

  • gvc.dll
    .dll windows:6 windows x64 arch:x64

    88b8f0d057d49dcf86500c2444296240


    Headers

    Imports

    Exports

    Sections

  • gvcolor.exe
    .exe windows:6 windows x64 arch:x64

    e73ee643f75206a8217ca4db59705e31


    Headers

    Imports

    Sections

  • gvgen.exe
    .exe windows:6 windows x64 arch:x64

    6c533fff76fa0eef3d2d46d0f2a4fbad


    Headers

    Imports

    Sections

  • gvmap.exe
    .exe windows:6 windows x64 arch:x64

    e51ab1e4d209aa5b38dc177b74f5717e


    Headers

    Imports

    Exports

    Sections

  • gvpack.exe
    .exe windows:6 windows x64 arch:x64

    2cba04c20abba2605870c69280e5cd85


    Headers

    Imports

    Sections

  • gvplugin_core.dll
    .dll windows:6 windows x64 arch:x64

    2676796de5f87813c4b3acdbbca9e1fd


    Headers

    Imports

    Exports

    Sections

  • gvplugin_dot_layout.dll
    .dll windows:6 windows x64 arch:x64

    724cc1ccd984d0e71e333818e3ceb61c


    Headers

    Imports

    Exports

    Sections

  • gvplugin_gdiplus.dll
    .dll windows:6 windows x64 arch:x64

    ccc709ae058332479465ca2e32cb0f06


    Headers

    Imports

    Exports

    Sections

  • gvplugin_neato_layout.dll
    .dll windows:6 windows x64 arch:x64

    80df0e720e9e47cd0b5e55379ddf44d2


    Headers

    Imports

    Exports

    Sections

  • gvplugin_pango.dll
    .dll windows:6 windows x64 arch:x64

    65760abe565e3a74dc64d36870e0707f


    Headers

    Imports

    Exports

    Sections

  • gvplugin_vt100.dll
    .dll windows:6 windows x64 arch:x64

    4384332ef41d2b66919537f5881eef00


    Headers

    Imports

    Sections

  • gvpr.exe
    .exe windows:6 windows x64 arch:x64

    0e43c2b831992fbcc6af243f9235f595


    Headers

    Imports

    Exports

    Sections

  • gxl2dot.exe
    .exe windows:6 windows x64 arch:x64

    910b3329891793826ca70f526ef09429


    Headers

    Imports

    Sections

  • gxl2gv.exe
    .exe windows:6 windows x64 arch:x64

    910b3329891793826ca70f526ef09429


    Headers

    Imports

    Sections

  • libharfbuzz-0.dll
    .dll windows:6 windows x64 arch:x64

    1ea5cdb52b19532a631c410ada77b433


    Headers

    Imports

    Exports

    Sections

  • mm2gv.exe
    .exe windows:6 windows x64 arch:x64

    640417e66de04138ed41e11ac6a933d3


    Headers

    Imports

    Sections

  • neato.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • nop.exe
    .exe windows:6 windows x64 arch:x64

    7cf4b5b4cead7409e64b6e74340b03cd


    Headers

    Imports

    Sections

  • osage.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • pango-1.dll
    .dll windows:6 windows x64 arch:x64

    6ec4c02dc2fe227c6a58836f0681485d


    Headers

    Imports

    Exports

    Sections

  • pangocairo-1.dll
    .dll windows:6 windows x64 arch:x64

    250aa4d2761e47af290ed2bfa1bb6f0a


    Headers

    Imports

    Exports

    Sections

  • pangoft2-1.dll
    .dll windows:6 windows x64 arch:x64

    df518d572524b334bee360ef0fd5597c


    Headers

    Imports

    Exports

    Sections

  • pangowin32-1.dll
    .dll windows:6 windows x64 arch:x64

    219df55454958572119fa6e025818813


    Headers

    Imports

    Exports

    Sections

  • patchwork.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • pixman-1.dll
    .dll windows:6 windows x64 arch:x64

    7d4c078d4ab3f3c57247df5f9fb0a9cc


    Headers

    Imports

    Exports

    Sections

  • prune.exe
    .exe windows:6 windows x64 arch:x64

    e028f19cd6d60513c1b6c4bba69899d6


    Headers

    Imports

    Sections

  • sccmap.exe
    .exe windows:6 windows x64 arch:x64

    2603a479c0b75b9da1baa2b443fa8de0


    Headers

    Imports

    Sections

  • sfdp.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • tred.exe
    .exe windows:6 windows x64 arch:x64

    69799603b0090c32aa9004c742ec0aea


    Headers

    Imports

    Sections

  • twopi.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • unflatten.exe
    .exe windows:6 windows x64 arch:x64

    6fce5afda6c86c7c716552271be9d969


    Headers

    Imports

    Sections

  • vcruntime140_cor3.dll
    .dll windows:6 windows x64 arch:x64

    7f91c705cf579114968b3edc12e1175e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wpfgfx_cor3.dll
    .dll windows:6 windows x64 arch:x64

    ac3b0abeae626484285b3156c68cdebc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xdot.dll
    .dll windows:6 windows x64 arch:x64

    713b9eb4e5bc9882358cffae32587764


    Headers

    Imports

    Exports

    Sections