2024-05-23_40b4acc3d999bc8836af0e7fe66e0781_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-23_40b4acc3d999bc8836af0e7fe66e0781_avoslocker
Size

11.9MB
MD5

40b4acc3d999bc8836af0e7fe66e0781
SHA1

7b509dca1dfb97cdfb130c16787dcfd0e7fcd26c
SHA256

53744273443d5ff61a08d5aff680bd00f731a407fc17feccc867b3f7edc5aee7
SHA512

43cc37e7f52f438bb00c508597f66314b7b1deb70816678da28abb5511f29db2383cf43ac2495be8b24ed994b02375d7e9dd1f0ac31dce8a9ba7ce8290d87ae9
SSDEEP

196608:DDpiGlrB+1eN0bgxXtQrejzQO5GX7UNsv3Ov:XpiGlrAeN0bg8CEwaPi

Score

1^/10

Malware Config

Signatures

Files

2024-05-23_40b4acc3d999bc8836af0e7fe66e0781_avoslocker
.exe windows:5 windows x86 arch:x86

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:a3:5e:ee:fa:ca:01:3f:25:d4:f9:11:3f:fc:ae:e3
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

01/04/2022, 00:00

Not After

31/03/2025, 23:59

Subject

CN=Guthrie CAD/GIS Software Pty Ltd,O=Guthrie CAD/GIS Software Pty Ltd,ST=South Australia,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

96:0e:b5:25:25:9f:2f:95:63:16:d6:c5:bd:18:9c:56:b7:f8:90:13
Signer

Actual PE Digest

96:0e:b5:25:25:9f:2f:95:63:16:d6:c5:bd:18:9c:56:b7:f8:90:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_KeyboardProc@12

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 711KB - Virtual size: 156.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.1MB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

df:a3:5e:ee:fa:ca:01:3f:25:d4:f9:11:3f:fc:ae:e3Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

96:0e:b5:25:25:9f:2f:95:63:16:d6:c5:bd:18:9c:56:b7:f8:90:13Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

CODE Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 118KB - Virtual size: 117KB

.data Size: 711KB - Virtual size: 156.7MB

DATA Size: 134KB - Virtual size: 134KB

BSS Size: - Virtual size: 12KB

.rsrc Size: 3.4MB - Virtual size: 3.4MB

Size: 2.1MB - Virtual size:

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

df:a3:5e:ee:fa:ca:01:3f:25:d4:f9:11:3f:fc:ae:e3
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

96:0e:b5:25:25:9f:2f:95:63:16:d6:c5:bd:18:9c:56:b7:f8:90:13
Signer

.text
Size: 2.9MB - Virtual size: 2.9MB

CODE
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 118KB - Virtual size: 117KB

.data
Size: 711KB - Virtual size: 156.7MB

DATA
Size: 134KB - Virtual size: 134KB

BSS
Size: - Virtual size: 12KB

.rsrc
Size: 3.4MB - Virtual size: 3.4MB