Static task
static1
Behavioral task
behavioral1
Sample
2023-04-12_8c4bfd216fb8e69f7f1e1f4cb1e3f9a1_avoslocker.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-04-12_8c4bfd216fb8e69f7f1e1f4cb1e3f9a1_avoslocker.exe
Resource
win10v2004-20230221-en
General
-
Target
2023-04-12_8c4bfd216fb8e69f7f1e1f4cb1e3f9a1_avoslocker
-
Size
402KB
-
MD5
8c4bfd216fb8e69f7f1e1f4cb1e3f9a1
-
SHA1
6cfdb886b8d732dce3f3b7ad0defa75d0637b1be
-
SHA256
e7949028dcf4e3408dc27faa6d7712a51ab460d8e0f23aa561260ca765f6d6c2
-
SHA512
2998f2509f6311d24553dff4d04ae57a987e24ece31ba80a66b1cfcc80d901e0a07520b82b567314d1aab42252b26b731d2efe8530a5eb8bd05ef754350555db
-
SSDEEP
12288:T5rxhWsTDzB6BybYxl+xX4VpMDEvqXHRAS0uayw4H:T5rxhW6PB6BybYxlWX/DEv4e
Malware Config
Signatures
Files
-
2023-04-12_8c4bfd216fb8e69f7f1e1f4cb1e3f9a1_avoslocker.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ