Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_601ea14893017e0d85bbf310406e8326_powerloader_vabushky.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-27_601ea14893017e0d85bbf310406e8326_powerloader_vabushky.exe
Resource
win10v2004-20240802-en
Target
2024-09-27_601ea14893017e0d85bbf310406e8326_powerloader_vabushky
Size
54KB
MD5
601ea14893017e0d85bbf310406e8326
SHA1
b682dfebd5d6a4e83b20bd639fb077cb72cfc87d
SHA256
36ab8352af94cd0dd00cac19bbbf7299222c616aa8203b3e1c9e40b69ccf3d74
SHA512
62c6d8b95c773e799328d028546efcbdb1d486d8851953e4c7ffcbe4772e1cc7409ab95ac67becaab82baa45a5383ee0e35ad6fcbddc5a3f3ae2b1e8fd0b96b5
SSDEEP
768:iGwwi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC4:iGMo36pxZUk+OeOSc/Mn3FrGI14
Checks for missing Authenticode signature.
resource |
---|
2024-09-27_601ea14893017e0d85bbf310406e8326_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE