c:\PPB_Build_Environment\build_workdir\workspace\PowerPanel Business 4.0 build with parameters_TEST\PowerPanel_Business\PowerPanel_Business\Native\build\win32.vc8\daemon\Release\ppbd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
968ed30b6c390e3f04bd5d309cca9e89122ffa81ce5a67d88e21737ae8827f32.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
968ed30b6c390e3f04bd5d309cca9e89122ffa81ce5a67d88e21737ae8827f32.exe
Resource
win10v2004-20240802-en
General
-
Target
968ed30b6c390e3f04bd5d309cca9e89122ffa81ce5a67d88e21737ae8827f32
-
Size
232KB
-
MD5
a0a80d92411dcb9bef2c4e8257422d4d
-
SHA1
2272b0d1c9803da53ee495ff49faf8733682a009
-
SHA256
968ed30b6c390e3f04bd5d309cca9e89122ffa81ce5a67d88e21737ae8827f32
-
SHA512
a4a5a90203d8b5fa00349a60b34373c141816fd9fa2cc5b42742bef94c67d838ea9454f55603f299f5beb60eafe3e2d902273246445f2f53d7c774f973225016
-
SSDEEP
3072:F0CjnX1r2tVgd28FrpxK0EJAHByPfH10mQxt+KyJ:F0Cb1rXfrpc0cAHBynV0p8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 968ed30b6c390e3f04bd5d309cca9e89122ffa81ce5a67d88e21737ae8827f32
Files
-
968ed30b6c390e3f04bd5d309cca9e89122ffa81ce5a67d88e21737ae8827f32.exe windows:4 windows x86 arch:x86
cf3a420974ae7e52df219517e6153811
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
GetEnvironmentVariableA
GetCurrentDirectoryA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetModuleFileNameA
LoadLibraryA
CreateMutexA
CompareStringW
CompareStringA
SetEndOfFile
CreateFileW
CreateFileA
GetLocaleInfoW
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
ReleaseMutex
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
TerminateThread
GetExitCodeThread
Sleep
TerminateProcess
GetPriorityClass
SetPriorityClass
GetExitCodeProcess
CreateProcessA
DuplicateHandle
GetStdHandle
GetCurrentProcess
CreateEventA
ResetEvent
SetEvent
GetVersionExA
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
LCMapStringA
LCMapStringW
GetCPInfo
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetProcAddress
pm
?OnPowerChange@ppbe@cyberpower@@YA_NIPAX@Z
ppbedrvc
?SetDriverContext@ppbe@cyberpower@@YAX_NPAX@Z
?OnDeviceChange@ppbe@cyberpower@@YA_NIPAX@Z
ppbedc
?WaitDaemonTerminate@ppbe@cyberpower@@YAXXZ
?SignalDaemonTerminate@ppbe@cyberpower@@YAXXZ
user32
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostMessageA
FindWindowA
PostQuitMessage
DestroyWindow
DefWindowProcA
GetPropA
SetPropA
CreateWindowExA
RegisterClassExA
CallWindowProcA
advapi32
StartServiceCtrlDispatcherA
SetServiceStatus
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ