Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_df6247a62054d741c092f13b4044399e_powerloader_vabushky.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-27_df6247a62054d741c092f13b4044399e_powerloader_vabushky.exe
Resource
win10v2004-20240802-en
Target
2024-09-27_df6247a62054d741c092f13b4044399e_powerloader_vabushky
Size
54KB
MD5
df6247a62054d741c092f13b4044399e
SHA1
23b517af0d53325e41969d0457dd63a38280207d
SHA256
31657cb7556fdc1665359be709a36792459b29cf2df1261cc241277cb7d50e31
SHA512
68f00ab5665b8dbe269106e5d1933b841f8a8beb82de490e5637ee11027d1da76676b06b2e8d732b5a97f7fe5321fbe71ed8c4b0369798b1f3ef335c9e49db8f
SSDEEP
768:iG+wi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC+:iGWo36pxZUk+OeOSc/Mn3FrGI1+
Checks for missing Authenticode signature.
resource |
---|
2024-09-27_df6247a62054d741c092f13b4044399e_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE