2024-06-07_8863d648a7ea9c2c590d443ea90ff593_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-07_8863d648a7ea9c2c590d443ea90ff593_avoslocker
Size

454KB
MD5

8863d648a7ea9c2c590d443ea90ff593
SHA1

7468d0b0e735f299287b2990c2e885e6341c9d88
SHA256

1fbfc6a83b92b3b1f5986c33ba322cd7eac3732a9340a1ec9ba1905081159d5d
SHA512

1474e70ee815327f4e73c7fab8c56f85d64994737d54ba46db9a93454058c366456499c130d92980655010ea58ebc2ce3c58643425e3ab0d76379376131f53cd
SSDEEP

12288:Sf8fq1dXb4AORJ3qx3CxX/SHII7qOhL8LYXgA5bHYc0h:S39kAORJa1tt6YXgwYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-07_8863d648a7ea9c2c590d443ea90ff593_avoslocker

Files

2024-06-07_8863d648a7ea9c2c590d443ea90ff593_avoslocker
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ