Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_4a05d5a0ee0fd81aea9b8db58dda9e5f_powerloader_vabushky.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-27_4a05d5a0ee0fd81aea9b8db58dda9e5f_powerloader_vabushky.exe
Resource
win10v2004-20240802-en
Target
2024-09-27_4a05d5a0ee0fd81aea9b8db58dda9e5f_powerloader_vabushky
Size
54KB
MD5
4a05d5a0ee0fd81aea9b8db58dda9e5f
SHA1
1ed7462e8f642b4b2f510f08e355559bfdca066f
SHA256
5adb6c28b9edbf256b1a448ee89984889d9260fb6d75e50b835d49090874218d
SHA512
47006ecc97769c665c707324027ed85d5545ccec2e7d5df4e8ad56618ba4fbbf997a1a501658f420bcd64bf924329d512471d829e1a514b555003b6c387c2289
SSDEEP
768:iGAwi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC:iGco36pxZUk+OeOSc/Mn3FrGI1
Checks for missing Authenticode signature.
resource |
---|
2024-09-27_4a05d5a0ee0fd81aea9b8db58dda9e5f_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE