Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_35b325b6048568889e554c3a4c250aa4_powerloader_vabushky.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-27_35b325b6048568889e554c3a4c250aa4_powerloader_vabushky.exe
Resource
win10v2004-20240802-en
Target
2024-09-27_35b325b6048568889e554c3a4c250aa4_powerloader_vabushky
Size
54KB
MD5
35b325b6048568889e554c3a4c250aa4
SHA1
392f16acc19880d48453830b5e9c04f1e41e6a25
SHA256
3c301bac52190fa61780315f29c89e868b0ac9910c88492461f623ef816bbc41
SHA512
62a4de9cfd779e2cd316a9a6bd0b233776bc24f11b69e9d5867a7436e83ff54af8441b740b158670438a01fa76d61f111d86a76729a09b3bbaa864ddddda65da
SSDEEP
768:iGvwi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC:iGho36pxZUk+OeOSc/Mn3FrGI1
Checks for missing Authenticode signature.
resource |
---|
2024-09-27_35b325b6048568889e554c3a4c250aa4_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE