Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_298ce6f237745be1acc5e49dfb4cebdc_avoslocker_floxif.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-07_298ce6f237745be1acc5e49dfb4cebdc_avoslocker_floxif.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-07_298ce6f237745be1acc5e49dfb4cebdc_avoslocker_floxif
-
Size
2.6MB
-
MD5
298ce6f237745be1acc5e49dfb4cebdc
-
SHA1
2a22431f311a7042fa8ffa86c4f8bd3b2879c718
-
SHA256
7acdcfcb645d411ca1e1fc4c6c1fcf8ab323559e9d45140e37e467e29569f938
-
SHA512
563ffced6bca07541e9b207ddbf883a2190fcaa45281ada119263e6f5e0adec20c627ae6c797e55f2aae26ff6e737b25a7b2766c5d739e919bfd1b6fd1d13742
-
SSDEEP
49152:bFpQITTV1FCUQmp5vuMiCziu6I5TUsdSOYAOVAhjRqqB:bFpQITTIUQmLGMiCzx6I5osAOYAOVmjf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-07_298ce6f237745be1acc5e49dfb4cebdc_avoslocker_floxif
Files
-
2024-05-07_298ce6f237745be1acc5e49dfb4cebdc_avoslocker_floxif.exe windows:6 windows x86 arch:x86
ef2a0f5d9c475efdb6493950a261ea54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidToStringA
UuidToStringW
RpcStringFreeW
RpcStringFreeA
crypt32
CryptUnprotectData
ws2_32
WSAStartup
WSACleanup
WSASetLastError
inet_pton
kernel32
RtlUnwind
LCMapStringW
GetCommandLineA
SwitchToThread
GetStringTypeW
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTickCount
SetErrorMode
FindResourceExW
GetWindowsDirectoryA
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetVolumeInformationA
lstrcmpiA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
TerminateProcess
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
lstrcpyA
GetACP
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcessId
GetPrivateProfileIntA
GetVersionExA
GetCurrentThread
SuspendThread
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
lstrcmpA
CopyFileA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
VerifyVersionInfoA
CallNamedPipeA
CreateProcessA
VerSetConditionMask
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
CreateMutexA
SetCurrentDirectoryA
ResumeThread
GetExitCodeThread
WaitForSingleObject
CreateNamedPipeA
WaitForMultipleObjects
CreateEventA
ResetEvent
SetEvent
DisconnectNamedPipe
ConnectNamedPipe
CloseHandle
WriteFile
ReadFile
lstrlenA
FormatMessageA
GetModuleFileNameA
ExitThread
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
LocalFree
GetLastError
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
FindResourceW
SizeofResource
LockResource
LoadResource
GetTempPathA
DeleteFileA
GetCommandLineW
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetStdHandle
GetFileType
HeapQueryInformation
QueryPerformanceFrequency
ExitProcess
GetStdHandle
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
CreateFileW
CompareStringW
user32
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
CharUpperA
DeleteMenu
MapDialogRect
GetAsyncKeyState
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
RealChildWindowFromPoint
LoadImageW
DestroyIcon
InvalidateRect
TrackMouseEvent
LoadCursorA
GetSysColorBrush
GetSystemMetrics
IntersectRect
InflateRect
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
WaitMessage
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
ReleaseDC
GetDC
MapVirtualKeyA
GetKeyNameTextA
GetCursorPos
TranslateMessage
GetMessageA
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
LoadImageA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
CreatePopupMenu
GetMenuDefaultItem
SetLayeredWindowAttributes
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetParent
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
OffsetRect
SetRectEmpty
GetClientRect
SendDlgItemMessageA
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
LoadCursorW
ScreenToClient
NotifyWinEvent
SetTimer
KillTimer
EnableWindow
SendMessageA
MessageBoxA
UpdateWindow
GetWindowRect
UnregisterClassA
MessageBoxExA
PostMessageA
LoadBitmapW
GetMenuStringA
GetMenuState
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
UpdateLayeredWindow
AppendMenuA
RemoveMenu
PostThreadMessageA
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos
BringWindowToTop
gdi32
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
SetRectRgn
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RectVisible
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
SaveDC
Polyline
CreateRoundRectRgn
LPtoDP
EnumFontFamiliesExA
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
PatBlt
CreateRectRgnIndirect
SetTextColor
SetBkColor
Polygon
RestoreDC
CreateBitmap
GetDeviceCaps
CreateDCA
GetObjectA
RealizePalette
CopyMetaFileA
CreateSolidBrush
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
InitializeSecurityDescriptor
RegOpenKeyExA
RegQueryValueExA
DeregisterEventSource
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegCloseKey
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
ReportEventA
RegisterEventSourceA
shell32
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHAppBarMessage
SHGetPathFromIDListA
ShellExecuteA
SHGetFileInfoA
ShellExecuteExA
SHBrowseForFolderA
SHGetSpecialFolderLocation
comctl32
ImageList_Draw
ImageList_AddMasked
InitCommonControlsEx
shlwapi
StrFormatKBSizeA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathFileExistsA
PathRemoveFileSpecW
uxtheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
ole32
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoCreateGuid
CoCreateInstance
CoDisconnectObject
CreateStreamOnHGlobal
CoInitializeEx
DoDragDrop
OleGetClipboard
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
oleaut32
SysFreeString
SysAllocStringByteLen
SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
iphlpapi
GetAdaptersInfo
winmm
PlaySoundA
timeGetTime
wininet
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetQueryOptionA
InternetQueryDataAvailable
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetReadFile
gdiplus
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipDrawImageI
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdiplusShutdown
GdipSetInterpolationMode
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 383KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ