Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_8899a1ee40078c8529e2180ba0500a1a_avoslocker_pikabot.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-28_8899a1ee40078c8529e2180ba0500a1a_avoslocker_pikabot.exe
Resource
win10v2004-20240508-en
Target
2024-05-28_8899a1ee40078c8529e2180ba0500a1a_avoslocker_pikabot
Size
1.3MB
MD5
8899a1ee40078c8529e2180ba0500a1a
SHA1
e3aac5d2804f543cca7f28e0042359a585e36448
SHA256
9aa1c28a9d5a2f006ecc2c3eb3c752f7f7c590fe03f866307513efdcc027badf
SHA512
ff9ce22529c97eb59b94e85fa2f283a4715baae7cc141c1e45a3092521d49540ec2b6d290f2d0beed2a002b79c69bde24ce893c3068a2a8bdbfa090f7afe479e
SSDEEP
24576:Jw8WQa/J3mL93CAMvBadA3Xnmb+tVq2S1NXw5dCG2S50nS248XdDMuaiBj/nt:Jw8W/M91MBmb+tVqTNXEdCG2S50nS2f5
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Bamboo\home\xml-data\build-dir\CST-DLIN-SOURCES\bin\Win32\ReleaseMT\bdreinit.pdb
MiniDumpWriteDump
GetCurrentThreadId
GetProcessHeap
HeapAlloc
HeapFree
GetModuleFileNameA
DebugBreak
OutputDebugStringW
CloseHandle
ExpandEnvironmentStringsW
CreateFileW
GetFileInformationByHandle
LoadLibraryW
DeviceIoControl
GetTickCount64
DeleteFileW
GetCurrentProcessId
FileTimeToSystemTime
GetCurrentProcess
GetProcessTimes
SetFileAttributesW
CreateDirectoryW
GetLocalTime
WideCharToMultiByte
GetModuleHandleA
FindClose
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
WriteConsoleW
lstrcpynW
IsDebuggerPresent
ReleaseSemaphore
ReleaseMutex
WaitForSingleObjectEx
AcquireSRWLockExclusive
OpenSemaphoreW
Sleep
SetFileInformationByHandle
FormatMessageW
GetVersionExW
GetFileSize
SetFilePointer
ReadFile
WriteFile
CreateMutexExW
CreateSemaphoreExW
ReleaseSRWLockExclusive
FindFirstFileW
FindNextFileW
GetFileAttributesW
QueryDosDeviceW
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
CreateToolhelp32Snapshot
GetTickCount
ReadProcessMemory
Module32FirstW
Module32NextW
lstrlenW
LoadLibraryExW
CreateFileMappingW
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemDefaultUILanguage
K32GetProcessMemoryInfo
SetEvent
LocalFree
GetFinalPathNameByHandleW
OpenFileById
GetFileInformationByHandleEx
SetEndOfFile
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetBinaryTypeW
GetDateFormatW
GetConsoleMode
GetConsoleOutputCP
FreeLibrary
SetLastError
GetModuleHandleExW
GetProcAddress
GetModuleHandleW
GetLastError
GetModuleFileNameW
MultiByteToWideChar
GetTimeFormatW
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FormatMessageA
FindFirstFileExW
GetFileAttributesExW
SetFilePointerEx
AreFileApisANSI
GetFileSizeEx
GetStringTypeW
InitializeSRWLock
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WakeAllConditionVariable
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
CompareStringEx
GetCPInfo
GetLocaleInfoEx
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetStdHandle
CreateFileA
FindFirstFileA
VirtualFree
VirtualAlloc
InitializeCriticalSection
CreateSemaphoreA
CreateEventA
WaitForMultipleObjects
GetTempPathA
DeleteFileA
SetFileAttributesA
GetTempFileNameA
RtlUnwind
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetStdHandle
GetFileType
CreateThread
ExitThread
FreeLibraryAndExitThread
FlushFileBuffers
ExitProcess
CompareStringW
CharLowerW
wsprintfW
CharUpperA
CharLowerA
CharUpperW
CloseServiceHandle
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
CreateProcessAsUserW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CommandLineToArgvW
VariantCopy
VariantClear
SysAllocString
SysFreeString
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoA
PathFindFileNameW
MapFileAndCheckSumW
WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ