Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-14_7d6e95311c001a554314f6bbd052dc53_powerloader_vabushky.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-10-14_7d6e95311c001a554314f6bbd052dc53_powerloader_vabushky.exe
Resource
win10v2004-20241007-en
Target
2024-10-14_7d6e95311c001a554314f6bbd052dc53_powerloader_vabushky
Size
54KB
MD5
7d6e95311c001a554314f6bbd052dc53
SHA1
890980000708f85a51388394e959138c6a71838d
SHA256
d0c3d602866b1d443aa97ad6f3837aa1e22263d7f7a6b00816ff3e7a920e2d37
SHA512
4f18d65bbb9dbeda48c633116f61d436f65ec91500963041b860364969f99f80ce935fa1592e632a5b35e48e997e9c3206855a31e9985bd5c4bc739ab6e88171
SSDEEP
768:iG0wi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC:iGYo36pxZUk+OeOSc/Mn3FrGI1
Checks for missing Authenticode signature.
resource |
---|
2024-10-14_7d6e95311c001a554314f6bbd052dc53_powerloader_vabushky |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE