2024-04-27_77e681a1dd80ad66a64a647f45835389_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-27_77e681a1dd80ad66a64a647f45835389_avoslocker
Size

1.5MB
MD5

77e681a1dd80ad66a64a647f45835389
SHA1

2fd07e75337e860892c79b2d93c8170e1fad699d
SHA256

313bdc31a7a12771ca13687cf00ba16a40acb6b3ed609fe420ee3edbb9dde385
SHA512

80474f2b401cb332b7b990fc9d918ebbc55b4c3fdfc85b006a14f0bca117956110cbcb0198062515da6eb0db352d6147c3e2dabcfc069fca37a9a97e3dbd2dd9
SSDEEP

24576:WqgEtqB1yCHD3AIsiNFIN6KYvuWQjiXMWIIOMt8dQIZT1i+wtr+Kz3+ULkNhXB:ZgfYCj3AI5NFMIuxuMWIdMtiZZi/r+Kg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-27_77e681a1dd80ad66a64a647f45835389_avoslocker

Files

2024-04-27_77e681a1dd80ad66a64a647f45835389_avoslocker
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ