2024-05-25_f422e697aae64d80cb2cd380dff92481_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-25_f422e697aae64d80cb2cd380dff92481_avoslocker
Size

3.9MB
MD5

f422e697aae64d80cb2cd380dff92481
SHA1

82925e59828dacbb9a0976a1910fb8bb2e088185
SHA256

d2464193f2834d555aa328def9ddd7b05d335d7d300b9d89b12042e4c5939d91
SHA512

cd36a0a350165572eb892b484c831e6ac21f7816149ebbe0cb2b88a9d875276107572a0183311c88f7ffe5698a6133bd4f16e83abb8bdf8120312e114db1d5c5
SSDEEP

49152:p5UBORoa5J9OG6l68hAxrJ0mvQHxfDz8zOxSmqbbLlTacQArEnhcDwYq6tj7mwSn:p5nPGA5J0KgVDkTmqXBVrMSPtj7mw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-25_f422e697aae64d80cb2cd380dff92481_avoslocker

Files

2024-05-25_f422e697aae64d80cb2cd380dff92481_avoslocker
.exe windows:6 windows x86 arch:x86

c7410399818e4d1ad355186bc556d8c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

d3dx9_43

D3DXMatrixTranspose
D3DXMatrixRotationAxis
D3DXMatrixMultiply
D3DXMatrixScaling
D3DXVec3TransformCoord
D3DXMatrixTranslation
D3DXMatrixRotationY
D3DXMatrixRotationZ
D3DXVec3Normalize
D3DXVec3TransformNormal
D3DXLoadSurfaceFromSurface
D3DXCreateTextureFromFileInMemoryEx
D3DXComputeNormals
D3DXLoadMeshFromXW
D3DXGetFVFVertexSize
D3DXLoadMeshFromXInMemory
D3DXCreateTextureFromFileExW
D3DXCreateMeshFVF
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXComputeNormalMap
D3DXMatrixInverse
D3DXCreateTexture
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXCreateEffect
D3DXVec4Transform
D3DXMatrixRotationX
D3DXComputeBoundingSphere

winmm

mmioStringToFOURCCW
mmioOpenW
mmioRead
mmioSeek
mmioDescend
timeGetTime

dsound

ord11

comctl32

ord17

kernel32

GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStdHandle
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
InitializeCriticalSectionEx
GetTempPathW
LoadLibraryW
GetFullPathNameW
CreateFileW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceFrequency
CloseHandle
WideCharToMultiByte
QueryPerformanceCounter
WriteFile
DeleteFileW
CopyFileW
HeapFree
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
lstrcpyW
SizeofResource
LockResource
ReadConsoleW
FindResourceW
GetCommandLineW
SetThreadPriority
GetVersionExW
GetCurrentThread
lstrcatW
GetProcAddress
FreeLibrary
GetModuleFileNameW
CreateProcessW
TlsSetValue
TlsGetValue
LoadLibraryExW
TlsAlloc
TlsFree
GetModuleHandleW
GetSystemTimeAsFileTime
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
EncodePointer
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
GetDriveTypeW
GetFileInformationByHandle
GetCurrentDirectoryW
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
SetFilePointerEx
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetFileType
LoadResource
SetEndOfFile

user32

CreateWindowExW
UnionRect
ScreenToClient
SendMessageW
EndDialog
SetWindowTextW
LoadStringW
MessageBoxW
FillRect
MonitorFromWindow
DispatchMessageW
SetTimer
GetMonitorInfoW
PeekMessageW
RegisterClassW
SetWindowPos
PostMessageW
DefWindowProcW
FrameRect
AdjustWindowRect
IsDlgButtonChecked
MonitorFromRect
ShowWindow
CheckRadioButton
TranslateMessage
LoadIconW
EnumDisplayDevicesW
SetRectEmpty
GetClientRect
GetDlgItem
DrawTextW
SetRect
KillTimer
CheckDlgButton
EnumDisplaySettingsW
SystemParametersInfoW
DialogBoxParamW
UpdateWindow
InvalidateRect
BeginPaint
EndPaint
EnableWindow
GetWindowTextW
wsprintfW
LoadCursorW
SetCursor
GetMessageW
PostQuitMessage

gdi32

ExcludeClipRect
GetStockObject

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW

shell32

ShellExecuteW

ole32

CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitialize
StringFromGUID2

oleaut32

SysFreeString
SysAllocString

gdiplus

GdiplusStartup

shlwapi

PathFileExistsW
PathFindFileNameW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7410399818e4d1ad355186bc556d8c1

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

d3dx9_43

winmm

dsound

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

shlwapi

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 315KB - Virtual size: 315KB

.data Size: 47KB - Virtual size: 58KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 103KB - Virtual size: 102KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 315KB - Virtual size: 315KB

.data
Size: 47KB - Virtual size: 58KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 103KB - Virtual size: 102KB