2024-05-29_8057ae3f3665de33162d4a539b83ef13_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-29_8057ae3f3665de33162d4a539b83ef13_avoslocker
Size

5.6MB
MD5

8057ae3f3665de33162d4a539b83ef13
SHA1

169e723e0d7664136707ef73963db4c48a36dea4
SHA256

58c8f271e533a44fcd8d70c9aa64e12fb86bcd5099b57892342d22dcd35be147
SHA512

43c51eac3a13ae9dfbec95ad6df58e635ffab1b4133d1cf123496f5f31b1c968a2453be7607ce996d16942682d413a9b0b8fcb2b9e2d2f2e5519038d5eb1aa71
SSDEEP

98304:VEmxi0Om+IK90QiF+zMD6KJZ6GarUB2cFLOAkGkzdnEVomFHKnP:qmxaI6iZ6GaoB2cFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-29_8057ae3f3665de33162d4a539b83ef13_avoslocker

Files

2024-05-29_8057ae3f3665de33162d4a539b83ef13_avoslocker
.exe windows:6 windows x86 arch:x86

fda64ab8be946d5fe50bc6babf5c1fc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
OutputDebugStringA
LoadLibraryExW
GetThreadLocale
lstrcpyW
InitializeCriticalSectionAndSpinCount
GlobalGetAtomNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
lstrcmpiW
VerSetConditionMask
VerifyVersionInfoW
GetFileSize
FlushFileBuffers
GetFullPathNameW
GetEnvironmentVariableW
EncodePointer
GetModuleHandleA
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
CreateFileA
DeviceIoControl
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
GetExitCodeProcess
GenerateConsoleCtrlEvent
VirtualQuery
WideCharToMultiByte
CopyFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemInfo
GlobalFlags
GetFileAttributesExW
MultiByteToWideChar
OpenProcess
GetVersionExW
PeekNamedPipe
RemoveDirectoryW
TerminateProcess
GetCurrentProcess
GetCommandLineW
CreateDirectoryW
LoadLibraryW
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
FreeResource
SizeofResource
GlobalReAlloc
MulDiv
ResumeThread
SetThreadPriority
CreateThread
SetEvent
WriteFile
SetFilePointer
CreateFileW
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
GetTickCount64
GetTimeZoneInformation
GetTickCount
FreeLibrary
CreateProcessW
GetStartupInfoW
CreatePipe
GetVolumeInformationW
ExitProcess
SetFilePointerEx
ReadFile
TryEnterCriticalSection
GetACP
Sleep
InitializeCriticalSection
CreateEventW
DeleteFileW
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LocalFree
GetCurrentThread
lstrcmpA
CompareStringA
GetCurrentProcessId
DeleteCriticalSection
CreateMutexExW
GetProcAddress
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
OpenSemaphoreW
WaitForSingleObjectEx
OutputDebugStringW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
FindResourceExW
SearchPathW
GetProfileIntW
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
GetLastError
FormatMessageW
HeapSize
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
GetModuleHandleExW
ReleaseSemaphore
EnterCriticalSection
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
EnumSystemLocalesW
IsValidLocale
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualAlloc
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
GetCommandLineA
RtlUnwind
LCMapStringW
GetCPInfo
GetStringTypeW

user32

UnregisterClassW
EnableWindow
MessageBoxW
GetWindowTextLengthW
GetWindowTextW
IsChild
ClientToScreen
GetDlgCtrlID
CopyRect
GetScrollRange
RedrawWindow
OffsetRect
DrawIcon
GetScrollPos
WindowFromPoint
ScreenToClient
FillRect
SetWindowRgn
GetWindowRgn
SetWindowTextW
GetWindowInfo
GetParent
GetSysColor
PostMessageW
GetSystemMetrics
DestroyIcon
DestroyCursor
SetParent
MessageBeep
SendMessageW
InvalidateRect
WinHelpW
IsWindowVisible
LoadCursorW
GetCursorPos
SetCursorPos
GetWindowRect
GetClientRect
EqualRect
SetWindowPos
SetActiveWindow
GetKeyState
SetCursor
GetWindow
ShowWindow
AdjustWindowRectEx
PeekMessageW
GetFocus
GetActiveWindow
GetDesktopWindow
IsWindow
SetFocus
wsprintfW
ReleaseDC
GetWindowDC
GetDC
LoadImageW
LoadIconW
SetPropW
RegisterClassW
SetTimer
GetClassInfoW
LoadStringW
RemovePropW
CreateWindowExW
GetPropW
DestroyWindow
DefWindowProcW
GetWindowLongW
CopyImage
SetForegroundWindow
EnumDisplaySettingsW
SetClipboardData
GetClipboardData
MoveWindow
EmptyClipboard
CloseClipboard
GetMonitorInfoW
OpenClipboard
WaitForInputIdle
MonitorFromWindow
GetWindowThreadProcessId
CreateMenu
EnableMenuItem
AppendMenuW
CheckMenuItem
InsertMenuW
TranslateAcceleratorW
DestroyMenu
CreateAcceleratorTableW
DestroyAcceleratorTable
GetSubMenu
TrackPopupMenu
CreatePopupMenu
DeleteMenu
GetMenuItemCount
GetMenu
ModifyMenuW
RegisterWindowMessageW
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetMenuItemID
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
MapWindowPoints
GetClassLongW
GetLastActivePopup
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SetScrollInfo
GetScrollInfo
CheckDlgButton
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetMenuStringW
GetMenuState
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
CreateDialogIndirectParamW
EndDialog
SystemParametersInfoW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
ShowOwnedPopups
CharNextW
DrawFocusRect
NotifyWinEvent
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
InflateRect
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
IsClipboardFormatAvailable
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateW
TrackMouseEvent
CharUpperW
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
GetIconInfo
GetMenuDefaultItem
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
SetMenuDefaultItem
CopyIcon
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
HideCaret
GetDoubleClickTime
GetComboBoxInfo
CallWindowProcW
ReleaseCapture
PtInRect
SetCapture
IsRectEmpty
GetCapture
GetNextDlgTabItem
IsIconic
UpdateWindow
SetScrollPos
KillTimer
SetWindowLongW
SetScrollRange
GetClassNameW
IntersectRect
LoadBitmapW
SetMenu
IsWindowEnabled
GetSystemMenu
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
GetMessagePos
InvertRect
ChildWindowFromPointEx
IsZoomed
SetRect
GetTopWindow

gdi32

GetObjectType
GetClipBox
ExcludeClipRect
Escape
GetViewportExtEx
RectVisible
PtInRegion
CreateDCW
SetPixelV
Polygon
LPtoDP
DPtoLP
GetWindowExtEx
SetPixel
CreateBrushIndirect
CreateHatchBrush
GetWindowOrgEx
CreatePatternBrush
GetPixel
CreateRectRgn
CreateBitmap
CombineRgn
GetViewportOrgEx
CreateRoundRectRgn
GetTextMetricsW
CreatePen
Rectangle
Ellipse
CreateSolidBrush
CreateEllipticRgn
RoundRect
PatBlt
GetCurrentObject
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
StretchBlt
RealizePalette
GetStockObject
GetDIBits
GetDeviceCaps
PtVisible
SelectPalette
CreatePalette
SetStretchBltMode
GetObjectW
CreateFontIndirectW
DeleteObject
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetMapMode
SetRectRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
OffsetRgn
CreatePolygonRgn
Polyline
EnumFontFamiliesExW
GetNearestPaletteIndex
GetPaletteEntries
ExtFloodFill
LineTo
DeleteDC
IntersectClipRect
CopyMetaFileW
SetTextColor
SetBkColor
GetBoundsRect
FrameRgn
FillRgn
GetSystemPaletteEntries
SetBkMode
GetTextFaceW
SetPaletteEntries

advapi32

EventRegister
EventWriteTransfer
EventUnregister
RegGetValueW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
EventSetInformation
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDListW
DragQueryFileW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
DragFinish
SHAppBarMessage
SHGetFileInfoW

ole32

CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
DoDragDrop
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
CoGetClassObject
CoUninitialize
CoCreateInstance
CLSIDFromProgID
CoDisconnectObject
CoInitialize
CoCreateGuid
OleUninitialize
StringFromGUID2
CoFreeUnusedLibraries
GetHGlobalFromStream
ReleaseStgMedium
OleDuplicateData
RevokeDragDrop
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleInitialize
OleRun
CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound
VariantCopyInd
SysFreeString
OleCreateFontIndirect
RegisterTypeLi
SysAllocString
VariantCopy
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayCreate
VarCmp
SafeArrayAccessData
VariantChangeType
VariantClear
LHashValOfNameSys
LoadTypeLi
SafeArrayDestroy
SysStringLen
SysAllocStringLen
SafeArrayGetUBound
VariantInit
SafeArrayGetDim
VariantTimeToSystemTime
VarBstrFromDate
SystemTimeToVariantTime

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetIcon

libcurl

curl_global_init
curl_easy_setopt
curl_easy_init
curl_easy_escape
curl_free
curl_easy_getinfo
curl_easy_perform
curl_slist_free_all
curl_mime_init
curl_mime_addpart
curl_mime_filedata
curl_mime_filename
curl_mime_name
curl_mime_type
curl_mime_free
curl_easy_pause
curl_slist_append
curl_easy_cleanup
curl_global_cleanup

gdiplus

GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdiplusStartup
GdipGetImageHeight
GdipGetImagePaletteSize
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToStream
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipCloneBrush
GdipDeleteBrush
GdipGetBrushType
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipGetImageGraphicsContext
GdipSetSmoothingMode
GdipDrawEllipse
GdipGraphicsClear
GdipFillEllipse
GdipDeletePen
GdipClonePen
GdipCreatePen1

shlwapi

PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW

msimg32

AlphaBlend
TransparentBlt

uxtheme

SetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetWindowTheme

oledlg

OleUIBusyW

ws2_32

WSACleanup

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fda64ab8be946d5fe50bc6babf5c1fc6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

libcurl

gdiplus

shlwapi

msimg32

uxtheme

oledlg

ws2_32

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 681KB - Virtual size: 680KB

.data Size: 60KB - Virtual size: 115KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 251KB - Virtual size: 251KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 681KB - Virtual size: 680KB

.data
Size: 60KB - Virtual size: 115KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 251KB - Virtual size: 251KB