Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_28e62542ab6dafc38acdf8e2b6132ec1_powerloader_vabushky.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-27_28e62542ab6dafc38acdf8e2b6132ec1_powerloader_vabushky.exe
Resource
win10v2004-20240802-en
Target
2024-09-27_28e62542ab6dafc38acdf8e2b6132ec1_powerloader_vabushky
Size
54KB
MD5
28e62542ab6dafc38acdf8e2b6132ec1
SHA1
fe49d06a7f3bfa48d967d9cc75be598f42dd02de
SHA256
4e9b84d9355c2819f3ebbe9f2295a707ddb445e5dacabe9d869bcf3f8b885a21
SHA512
5113f1424d3e82525ae7b4f3edef9a9f55cc870d0d386a781a933dd2ce6f24e8bab709df3b1b63ee5cbe68baf2105d652cfcce8d82cb7be33ed8d942e1283c66
SSDEEP
768:iGfwi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC:iGRo36pxZUk+OeOSc/Mn3FrGI1
Checks for missing Authenticode signature.
resource |
---|
2024-09-27_28e62542ab6dafc38acdf8e2b6132ec1_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE