2024-05-03_20ae8c5b0b8370c608567dd6d311d9a6_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-03_20ae8c5b0b8370c608567dd6d311d9a6_avoslocker
Size

8.6MB
MD5

20ae8c5b0b8370c608567dd6d311d9a6
SHA1

91436a08f0a22b6b8615c02b30434bee5192446e
SHA256

0e202d94b81c9ca547a6359904da01a17fa0dd6f31c5c405c1677e63798f818d
SHA512

d13b6d9a17202c0f0c597caca98e1cdf0d4c9a35ed1b642a4858f145056bdbde5f5ed8fab24cc8bc2ff3e4ca5463dd7f4448f44985aad68e1e6dc8d145d1e3db
SSDEEP

196608:kZuOU2qAZelsL7AcGNEBYM02e9oF6Gz5xZexC:TIZeiL0yZ0YAGz5xV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-03_20ae8c5b0b8370c608567dd6d311d9a6_avoslocker

Files

2024-05-03_20ae8c5b0b8370c608567dd6d311d9a6_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15.1MB - Virtual size: 15.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 938KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmimed
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ