Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_69580ee6b3885d7c9586b29e464d26e3_powerloader_vabushky.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-27_69580ee6b3885d7c9586b29e464d26e3_powerloader_vabushky.exe
Resource
win10v2004-20240802-en
Target
2024-09-27_69580ee6b3885d7c9586b29e464d26e3_powerloader_vabushky
Size
54KB
MD5
69580ee6b3885d7c9586b29e464d26e3
SHA1
876103e935ad3a6605539404fb5765f8ad43b572
SHA256
59f4cc8c96cbd0e55dcb027b1d4c756dbfa474e0f2805bc5392646e86911bd4f
SHA512
62ea06628af70d0b19299b3fec68bbc8d1afc084d454ab1fa1683f0a54ee79e20004c79fa30e3561906eb636afb9b0fb3946bb081d7bc6c029714410474bb5fc
SSDEEP
768:iGwwi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPCZ:iGMo36pxZUk+OeOSc/Mn3FrGI1Z
Checks for missing Authenticode signature.
resource |
---|
2024-09-27_69580ee6b3885d7c9586b29e464d26e3_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE