2024-05-07_671edeb98fe69ac26d89b5bddcb77bfd_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-07_671edeb98fe69ac26d89b5bddcb77bfd_avoslocker
Size

5.8MB
MD5

671edeb98fe69ac26d89b5bddcb77bfd
SHA1

386cbec324ded4223395010535b3b151da8a32c9
SHA256

f0750fc398bb2b4d0728ff5814873d4ee0776615db9d8afc332033ec0b483662
SHA512

98e9677798e2a8d200d512804f113c78b1c84e8402a0657ae1809ecea0ce3125a371d922d734fc0b25b109e76a8e71868d7ca71df0afa993435dac7a20141c1c
SSDEEP

98304:VZ84kbEy0yjeVIvZ6U6jeQcwyL3T3wFn7aaWKc2+y4R5vwX3F0FV36wasrqNGVhH:b84RyjeVIvZ6U6jeQcwyLzwF7xWK9+3D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-07_671edeb98fe69ac26d89b5bddcb77bfd_avoslocker

Files

2024-05-07_671edeb98fe69ac26d89b5bddcb77bfd_avoslocker
.exe windows:6 windows x86 arch:x86

26768032381049a57051c82a34906030

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\sciter\sciter\sdk.js\bin\windows\x32\scapp.pdb

Imports

shell32

ShellExecuteExW
SHGetFileInfoW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
ord74
DragQueryFileW
ShellExecuteW
ord727

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetVersionExW
GetTempPathW
SetFileCompletionNotificationModes
CancelIo
GetQueuedCompletionStatus
SetErrorMode
ConnectNamedPipe
WaitNamedPipeW
SwitchToThread
CancelIoEx
GetNamedPipeHandleStateW
CreateFileA
CancelSynchronousIo
QueueUserWorkItem
PeekNamedPipe
CreateNamedPipeW
CreateNamedPipeA
SetNamedPipeHandleState
SetHandleInformation
UnregisterWaitEx
PostQueuedCompletionStatus
CreateJobObjectW
AssignProcessToJobObject
UnregisterWait
RegisterWaitForSingleObject
SetInformationJobObject
CreateIoCompletionPort
ReadDirectoryChangesW
GetCurrentDirectoryW
GetShortPathNameW
GetLongPathNameW
CreateSymbolicLinkW
CopyFileW
MoveFileExW
GetSystemInfo
GetFileInformationByHandle
GetFileAttributesW
CreateHardLinkW
ReOpenFile
RemoveDirectoryW
DeviceIoControl
GetDiskFreeSpaceW
GetFileInformationByHandleEx
CreateDirectoryW
CreateSemaphoreW
GetNativeSystemInfo
GetModuleHandleA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DuplicateHandle
ResumeThread
InitializeConditionVariable
InitializeCriticalSection
WakeConditionVariable
WakeAllConditionVariable
DebugBreak
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleMode
GetConsoleCursorInfo
SetConsoleCursorInfo
FillConsoleOutputCharacterW
ReadConsoleInputW
WriteConsoleInputW
FillConsoleOutputAttribute
GetNumberOfConsoleInputEvents
ReleaseSemaphore
TryEnterCriticalSection
InitializeSRWLock
SleepConditionVariableCS
LoadLibraryA
CreateThread
SetThreadPriority
GetTempPathA
GetTempFileNameA
InitializeCriticalSectionEx
LocalFree
GetCommandLineW
BeginUpdateResourceW
UpdateResourceW
FindResourceW
LoadResource
LockResource
SetConsoleCursorPosition
FormatMessageA
GetFinalPathNameByHandleW
DecodePointer
WriteConsoleW
MultiByteToWideChar
EndUpdateResourceW
SizeofResource
HeapReAlloc
HeapSize
GetFileAttributesExW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
FindFirstFileExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
FlushFileBuffers
SetConsoleCtrlHandler
ReadConsoleW
ReadFile
VirtualFree
VirtualAlloc
WaitForMultipleObjects
lstrcmpW
LoadLibraryW
GetThreadPriority
GetTickCount
ExitThread
FreeLibraryAndExitThread
SetFileAttributesW
DeleteFileW
SleepConditionVariableSRW
GetExitCodeThread
LCMapStringEx
SetFileTime
IsValidCodePage
SetStdHandle
EnumSystemLocalesW
VerSetConditionMask
VerifyVersionInfoW
GetFullPathNameW
GetModuleFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
CompareStringW
CompareStringA
GetLocaleInfoW
GetNumberFormatW
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetComputerNameW
GetUserDefaultLCID
GetSystemDefaultLCID
LoadLibraryExW
GetProcAddress
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CloseHandle
SetFilePointer
SetEndOfFile
FindFirstFileW
FindNextFileW
FindClose
OutputDebugStringW
GetSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
FileTimeToSystemTime
Sleep
MulDiv
FreeLibrary
GetCurrentThreadId
GetLastError
GetCPInfo
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableW
GlobalFree
FormatMessageW
LocalAlloc
lstrlenW
LocalSize
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileType
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCurrentThread
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
LCMapStringW
IsValidLocale

gdiplus

GdipBitmapLockBits
GdipDrawDriverString
GdipCreateHBITMAPFromBitmap
GdipDrawImageI
GdipCreateBitmapFromGraphics
GdiplusStartup
GdiplusShutdown
GdipDeleteFontFamily
GdipGetFamily
GdipCreateFontFromLogfontA
GdipGetEmHeight
GdipGetLineSpacing
GdipCreateFontFromDC
GdipGetCellAscent
GdipDeleteFont
GdipGetFontSize
GdipSetPenDashOffset
GdipSetPenDashArray
GdipSetPenDashStyle
GdipSetPenMiterLimit
GdipSetPenLineJoin
GdipSetPenStartCap
GdipSetPenEndCap
GdipCreatePen2
GdipCreateFromHDC
GdipCreateFromHWND
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipSetPageUnit
GdipAddPathBezier
GdipAddPathArc
GdipSetPathFillMode
GdipClosePathFigure
GdipAddPathLine
GdipStartPathFigure
GdipIsVisiblePathPoint
GdipResetPath
GdipDrawRectangle
GdipFillRectangle
GdipDrawArc
GdipDrawPie
GdipFillPie
GdipDrawEllipse
GdipFillEllipse
GdipBitmapUnlockBits
GdipGetSolidFillColor
GdipGetBrushType
GdipShearMatrix
GdipScaleMatrix
GdipRotateMatrix
GdipTranslateMatrix
GdipGetMatrixElements
GdipGetWorldTransform
GdipDeleteMatrix
GdipCreateMatrix
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipTransformPoints
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCreateTexture
GdipSetSmoothingMode
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipAddPathRectangleI
GdipClonePath
GdipGetPathWorldBounds
GdipSetClipRect
GdipGraphicsClear
GdipGetImageGraphicsContext
GdipBeginContainer2
GdipRestoreGraphics
GdipSaveGraphics
GdipGetSmoothingMode
GdipTranslateWorldTransform
GdipSetClipPath
GdipSetClipRectI
GdipDrawLine
GdipFillRectanglesI
GdipDrawPath
GdipDeletePen
GdipCreatePen1
GdipSetPathGradientTransform
GdipSetPathGradientCenterPoint
GdipSetPathGradientWrapMode
GdipSetPathGradientPresetBlend
GdipCreatePathGradientFromPath
GdipAddPathEllipse
GdipSetLineWrapMode
GdipSetLinePresetBlend
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdipEndContainer
GdipCloneImage
GdipDisposeImage
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipCreateMatrix2
GdipMultiplyLineTransform
GdipCreateLineBrush
GdipGetClipBoundsI
GdipFillPath
GdipAddPathLineI
GdipAddPathArcI
GdipDeletePath
GdipCreatePath

shlwapi

PathIsRelativeW

winmm

timeGetTime
timeEndPeriod
timeKillEvent
timeBeginPeriod
timeSetEvent

oleacc

LresultFromObject
AccessibleObjectFromWindow

hid

HidP_GetUsages
HidP_GetButtonCaps
HidP_GetValueCaps
HidP_MaxUsageListLength
HidP_GetUsageValue
HidP_GetScaledUsageValue
HidP_GetCaps

imm32

ImmNotifyIME
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmAssociateContextEx
ImmSetCandidateWindow

usp10

ScriptPlace
ScriptApplyDigitSubstitution
ScriptFreeCache
ScriptBreak
ScriptItemize
ScriptShape

ws2_32

getaddrinfo
freeaddrinfo
WSASetLastError
WSAStartup
select
WSARecvFrom
bind
WSAIoctl
WSASocketW
closesocket
WSAGetLastError
setsockopt
WSASendTo
getsockopt
WSASend
ntohl
ntohs
htons
shutdown
listen
getpeername
getsockname
socket
connect
WSARecv
htonl
ioctlsocket
FreeAddrInfoW
GetAddrInfoW

wininet

HttpQueryInfoW
InternetErrorDlg
HttpSendRequestA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetQueryOptionW
HttpQueryInfoA
InternetSetOptionW
InternetOpenA
InternetConnectA

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
SystemFunction036
RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetUserNameW
OpenProcessToken

ole32

OleInitialize
StringFromCLSID
CoCreateGuid
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoTaskMemAlloc
CoUninitialize
OleUninitialize
ReleaseStgMedium
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoFreeUnusedLibraries

oleaut32

SafeArrayCreateVector
SysFreeString
SysAllocStringLen
SafeArrayPutElement
SafeArrayDestroy

gdi32

GetFontUnicodeRanges
EnumFontFamiliesExW
CreateFontW
GetObjectW
GetObjectA
GetGlyphIndicesW
CreateSolidBrush
SetLayout
GetStockObject
BitBlt
StartPage
EndDoc
CreateDCW
SetMapMode
StartDocW
EndPage
CreateCompatibleDC
StretchDIBits
SelectObject
DeleteDC
DeleteObject
CreateDIBSection
AddFontMemResourceEx
GetDeviceCaps
GetDIBits
CreateBitmap
GetClipBox
SaveDC
SetViewportOrgEx
RestoreDC

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW

winspool.drv

ord203

user32

GetWindowThreadProcessId
GetDoubleClickTime
GetDesktopWindow
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
CloseClipboard
CountClipboardFormats
EnumClipboardFormats
SetClipboardData
IsClipboardFormatAvailable
GetClipboardData
GetWindowLongW
SystemParametersInfoW
PostQuitMessage
EnumDisplayDevicesW
TranslateMessage
CallMsgFilterW
GetMonitorInfoW
DispatchMessageW
EnumDisplayMonitors
MonitorFromWindow
MapVirtualKeyW
GetKeyState
GetMessageW
GetWindowRect
IsWindow
EnableWindow
IsWindowEnabled
GetClientRect
GetCursorPos
InvalidateRect
UpdateWindow
SetWindowPos
AnimateWindow
IsWindowVisible
GetWindowPlacement
LoadCursorW
RegisterClassW
EndPaint
BeginPaint
SendMessageW
ReleaseCapture
GetForegroundWindow
CreateWindowExW
SetTimer
MoveWindow
SetWindowLongW
SetActiveWindow
ShowWindow
DefWindowProcW
MapWindowPoints
GetParent
DestroyWindow
WindowFromPoint
SetForegroundWindow
IsIconic
ScreenToClient
MessageBeep
RegisterWindowMessageW
LoadIconW
RegisterClassExW
AdjustWindowRectEx
SetClassLongW
GetClassLongW
PostMessageW
KillTimer
ReleaseDC
GetAsyncKeyState
GetSystemMetrics
GetMessageTime
PeekMessageW
IsWindowUnicode
GetFocus
SetFocus
SetCursor
SetScrollInfo
GetScrollInfo
GetWindowTextW
SetWindowTextW
SetCapture
GetUpdateRect
GetCapture
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetActiveWindow
IsChild
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
EnumThreadWindows
IsRectEmpty
GetWindow
FlashWindowEx
MonitorFromPoint
CreateMenu
GetMenuItemCount
RemoveMenu
InsertMenuW
GetMenu
SetMenu
RegisterRawInputDevices
GetRawInputData
GetRawInputDeviceInfoW
GetKeyboardLayout
CreateCaret
DestroyCaret
SetCaretPos
FindWindowW
UpdateLayeredWindow
DestroyIcon
MessageBoxW
NotifyWinEvent
GetDC
DrawIconEx
PostThreadMessageW
GetQueueStatus
ClientToScreen
GetSysColor
DestroyCursor
LoadCursorFromFileA
CreateIconIndirect
GetIconInfo
MsgWaitForMultipleObjects
GetMessageExtraInfo

userenv

GetUserProfileDirectoryW

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_DrawEx

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26768032381049a57051c82a34906030

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shell32

version

kernel32

gdiplus

shlwapi

winmm

oleacc

hid

imm32

usp10

ws2_32

wininet

advapi32

ole32

oleaut32

gdi32

comdlg32

winspool.drv

user32

userenv

comctl32

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 97KB - Virtual size: 2.7MB

.rsrc Size: 84KB - Virtual size: 84KB

.reloc Size: 274KB - Virtual size: 274KB

.text
Size: 4.2MB - Virtual size: 4.2MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 97KB - Virtual size: 2.7MB

.rsrc
Size: 84KB - Virtual size: 84KB

.reloc
Size: 274KB - Virtual size: 274KB