2024-05-03_0a9ad074c21c6f31a520cdbf1f6e5bff_avoslocker | Triage

Sharing

General

Target

2024-05-03_0a9ad074c21c6f31a520cdbf1f6e5bff_avoslocker
Size

18.0MB
MD5

0a9ad074c21c6f31a520cdbf1f6e5bff
SHA1

59fce6c0126c4a03a2ed81a1591a7622471f2bda
SHA256

5ae02c24248015db5649550d73855ef2978ffe0f042dc34fc5c516eaa2b3465e
SHA512

800efc3d465f7205940bae12ff94a01e34a9d56b88bce468e64803919cc97a7c632eac4c4dab3cd076c6de7fe8f8176aba1af6be1f0c3c3f096b879716b63bca
SSDEEP

98304:gOIHhPXr6/cu61SLKnxijurypqEEWL/N/z5AXn9FQue3F4dvNEp3nQ6RmEXIfb:gOKhPb6/BLmxcurySi/NmX4ujxZEqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-03_0a9ad074c21c6f31a520cdbf1f6e5bff_avoslocker

Files

2024-05-03_0a9ad074c21c6f31a520cdbf1f6e5bff_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ