Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_85265e13eae3e17af2c2cb268af77078_avoslocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-11_85265e13eae3e17af2c2cb268af77078_avoslocker.exe
Resource
win10v2004-20240508-en
Target
2024-05-11_85265e13eae3e17af2c2cb268af77078_avoslocker
Size
3.7MB
MD5
85265e13eae3e17af2c2cb268af77078
SHA1
55f621b01abb622a0d0c63d497f3fccf01aa9931
SHA256
ebe2d024d9a249706227a14cada0cf50f02271a9b968eb27c48f46fc4bea6bef
SHA512
1c4b8ddfea965a05336a250f73fd9703635f3fbc9c8cfd9fc92750d7010edf9aa96c70d70d78d0c64117eb52654284fc094f798d293bd3792334fbc2fdf467c2
SSDEEP
98304:HXni/bA/JUb1fqmAfkPl3KNd/fjTsnSis0MhFzwdIL:AAaQNlis0Mh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\Builds\_work\3\s\Development\DS\Solution\Release\UpgradeBITSClient.pdb
GetAdaptersInfo
IsValidCodePage
FindFirstFileExW
GetDriveTypeW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetFileType
SetStdHandle
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
RtlUnwind
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
ExitProcess
CreateFileW
DeleteFileW
GetCPInfo
GetStringTypeW
LCMapStringEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
GetFileSize
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetLocalTime
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetWindowsDirectoryW
FreeLibrary
CreateFileA
GetLastError
SetLastError
GetCurrentProcessId
CreateThread
GetModuleHandleA
LoadLibraryA
WaitNamedPipeA
lstrlenW
FlushFileBuffers
ConnectNamedPipe
WriteConsoleW
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetCurrentDirectoryW
CreateDirectoryW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
GetUserDefaultLCID
GetTempFileNameW
GetProfileIntW
SearchPathW
FindResourceExW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
VirtualProtect
GetUserDefaultUILanguage
GetLocaleInfoW
SetErrorMode
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CompareStringA
SetThreadPriority
CreateEventW
SetEvent
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
EncodePointer
DuplicateHandle
GetVolumeInformationW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
SystemTimeToTzSpecificLocalTime
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetTickCount
GetFileTime
RemoveDirectoryW
SetFileAttributesW
DisconnectNamedPipe
QueryPerformanceCounter
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
LockFileEx
UnlockFile
HeapCompact
GetSystemInfo
DeleteFileA
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
GetCurrentThreadId
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
InitializeCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
lstrcmpA
WritePrivateProfileStringW
FindNextFileW
FindFirstFileW
FindClose
FreeConsole
CreateMutexW
ReleaseMutex
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
DecodePointer
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrcmpW
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
OpenProcess
ExpandEnvironmentStringsW
GetPrivateProfileIntW
ProcessIdToSessionId
GetExitCodeThread
TerminateThread
FormatMessageW
LocalAlloc
ResumeThread
SuspendThread
CreateNamedPipeW
GetThreadLocale
GetSystemDefaultUILanguage
WideCharToMultiByte
MultiByteToWideChar
FileTimeToSystemTime
MoveFileExW
MoveFileW
CopyFileW
GetPrivateProfileStringW
lstrcmpiW
WinExec
LocalFree
FindResourceW
SizeofResource
LockResource
LoadResource
IsWow64Process
GetVersionExW
GetWindowsDirectoryA
GetSystemDirectoryW
Sleep
RaiseException
OutputDebugStringW
SetClassLongW
LockWindowUpdate
RegisterClipboardFormatW
EnumChildWindows
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
PostThreadMessageW
NotifyWinEvent
SetWindowRgn
GetSystemMenu
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MonitorFromPoint
SetParent
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
GetNextDlgGroupItem
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
DeleteMenu
LoadImageW
TrackMouseEvent
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
GetWindowThreadProcessId
MessageBeep
IsZoomed
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
InflateRect
DrawFocusRect
FillRect
GetSysColor
ScreenToClient
MapVirtualKeyW
GetKeyNameTextW
TranslateMessage
GetMessageW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
UnionRect
CharUpperBuffW
UpdateLayeredWindow
SetMenuDefaultItem
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
RedrawWindow
ValidateRect
DefMDIChildProcW
TranslateMDISysAccel
UpdateWindow
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetComboBoxInfo
GetDoubleClickTime
CreateMenu
DestroyCursor
GetWindowRgn
GetMenuDefaultItem
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
CopyRect
IntersectRect
GetDesktopWindow
CharUpperW
UnhookWindowsHookEx
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
SendMessageW
FindWindowW
ReplyMessage
EnableWindow
InvalidateRect
GetWindowTextW
GetClientRect
LoadBitmapW
SetActiveWindow
SetForegroundWindow
GetWindowLongW
SetWindowLongW
FindWindowExW
PostMessageW
SetWindowPos
IsWindowVisible
SetTimer
KillTimer
LoadIconW
DestroyIcon
LoadMenuW
GetSubMenu
GetParent
ModifyMenuW
GetWindowRect
GetCursorPos
UnregisterClassW
ExitWindowsEx
IsIconic
GetSystemMetrics
DrawIcon
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
RegisterWindowMessageW
DispatchMessageW
AppendMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
GetForegroundWindow
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
GetMapMode
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
OffsetRgn
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
LPtoDP
Rectangle
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceW
SetPixelV
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
CreateFontIndirectW
CreateCompatibleDC
GetStockObject
StretchBlt
GetObjectW
PatBlt
DeleteDC
CopyMetaFileW
CreateDCW
GetDeviceCaps
BitBlt
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
IntersectClipRect
GetPaletteEntries
GetLayout
TransparentBlt
AlphaBlend
DocumentPropertiesW
OpenPrinterW
ClosePrinter
CloseServiceHandle
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
ConvertSidToStringSidW
RegDeleteTreeW
RegOpenKeyW
ConvertStringSidToSidW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
OpenProcessToken
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyW
RegCloseKey
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
ord680
CommandLineToArgvW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderPathW
InitCommonControlsEx
PathFileExistsW
PathFindFileNameW
PathAppendA
PathIsDirectoryW
PathRemoveFileSpecW
PathQuoteSpacesW
StrFormatByteSizeW
StrStrIW
PathFindExtensionW
PathStripPathW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathAppendW
PathFindFileNameA
DrawThemeBackground
GetWindowTheme
IsAppThemed
SetWindowTheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeSysColor
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
CoCreateInstance
StringFromCLSID
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CoInitialize
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoTaskMemFree
CLSIDFromString
StgCreateDocfileOnILockBytes
VariantTimeToSystemTime
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
LoadTypeLi
SafeArrayDestroy
SystemTimeToVariantTime
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysStringLen
SysFreeString
SysAllocString
OleUIBusyW
GdipDrawImageRectI
GdiplusShutdown
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipSetInterpolationMode
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
WinVerifyTrust
CryptDecodeObject
CryptMsgClose
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
HttpOpenRequestW
HttpSendRequestW
InternetSetOptionW
InternetGetLastResponseInfoW
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetCanonicalizeUrlW
InternetCrackUrlW
HttpQueryInfoW
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetSetStatusCallbackW
InternetQueryDataAvailable
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
PlaySoundW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ