D:\Development\IDX 15\IDRTI - 15.9 -\Release\x86\IDRTI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-15_52c426dbbb720abc31509ac9a2e61fa9_avoslocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-15_52c426dbbb720abc31509ac9a2e61fa9_avoslocker.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-06-15_52c426dbbb720abc31509ac9a2e61fa9_avoslocker
-
Size
5.0MB
-
MD5
52c426dbbb720abc31509ac9a2e61fa9
-
SHA1
ec55ccd8747bf8f9ddd003d5e073bb97a30415bc
-
SHA256
81d81593983195af2977c5f1c9a0739e2d08995d1a5f2538a7ecfb30670ebbed
-
SHA512
7e1e710c4c681228e0806628a0a3c4dca4d91c94ced3e6c3f9009f4f750d0ce430d0a8de91bee52d55b5887ffe5446163e92658fbcf172d5a6361e78bee0ab9f
-
SSDEEP
98304:aJ3rdDx9pyfEjEowx9sGEy6SKvQZF6cNBMdmlDijPcnPh0OT5Qjwguxw2WXg:aZdDx9ie6x5jTPlW+FT5QjwgR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-15_52c426dbbb720abc31509ac9a2e61fa9_avoslocker
Files
-
2024-06-15_52c426dbbb720abc31509ac9a2e61fa9_avoslocker.exe windows:6 windows x86 arch:x86
cad1e18530433dbfe4f49c90e7cb8882
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetNumberOfConsoleInputEvents
SetConsoleMode
CreateFileW
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetFileAttributesExW
DeleteFileW
MoveFileExW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
PeekConsoleInputA
GetConsoleCP
GetStdHandle
ExitProcess
HeapQueryInformation
GetCommandLineW
GetFullPathNameW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
InitializeCriticalSectionEx
OutputDebugStringW
ReadConsoleInputW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
GetProfileIntA
GetTempPathA
GetTickCount
FindResourceExW
VerifyVersionInfoA
VerSetConditionMask
InitializeSListHead
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetACP
GlobalFlags
GetAtomNameA
TlsFree
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersionExA
GetCurrentThread
FileTimeToLocalFileTime
lstrcmpA
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
GetStringTypeExA
GetThreadLocale
MoveFileA
lstrcmpiA
LoadLibraryExA
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
MultiByteToWideChar
FormatMessageA
GlobalSize
SetLastError
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
OpenSemaphoreA
Sleep
SearchPathA
LocalReAlloc
GetFileSize
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetEnvironmentVariableA
GetCurrentProcessId
FindNextFileA
FindClose
FindFirstFileA
ReadFile
GetCurrentProcess
GetProcAddress
SetErrorMode
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeviceIoControl
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTime
GetFileTime
SetCurrentDirectoryA
CopyFileA
GetWindowsDirectoryA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
lstrcpyA
LocalAlloc
GlobalFree
GlobalHandle
GlobalReAlloc
WriteFile
FindResourceA
MulDiv
GlobalLock
GlobalUnlock
GlobalAlloc
GetCurrentThreadId
LoadResource
CreateFileMappingA
WinExec
UnmapViewOfFile
MapViewOfFile
GetLocalTime
lstrcatA
GetVersion
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetShortPathNameA
GetModuleFileNameA
CloseHandle
GetVolumeInformationA
GetLongPathNameA
GetFileInformationByHandle
CreateFileA
GetCurrentDirectoryA
GetCommandLineA
DeleteFileA
CreateDirectoryA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
GetDriveTypeW
WriteConsoleW
user32
CreatePopupMenu
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
GetMessageA
CharUpperA
GetCursorPos
MapVirtualKeyA
GetKeyNameTextA
GetDesktopWindow
EndDialog
CreateDialogIndirectParamA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
InsertMenuItemA
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
HideCaret
GetMenuState
GetMenuStringA
MessageBoxA
IsWindow
IsDialogMessageA
IsRectEmpty
IntersectRect
SetFocus
InvertRect
NotifyWinEvent
GetMenuDefaultItem
SetDlgItemTextA
GetDlgItem
CreateDialogParamA
SendMessageA
SetTimer
EnableWindow
GetSystemMetrics
RedrawWindow
DestroyWindow
PeekMessageA
DispatchMessageA
TranslateMessage
wsprintfA
LoadStringA
LoadBitmapW
MessageBoxExA
EnumDisplayMonitors
MonitorFromPoint
GetWindowThreadProcessId
SetWindowLongA
GetForegroundWindow
AttachThreadInput
RegisterWindowMessageA
LoadIconW
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
IsZoomed
GetSysColorBrush
RealChildWindowFromPoint
TrackMouseEvent
LoadImageW
GetMenuItemInfoA
SystemParametersInfoA
UpdateWindow
UnregisterClassA
CopyImage
GetDialogBaseUnits
UnionRect
GetSystemMenu
DeleteMenu
SetParent
CharNextA
SetCapture
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DrawFocusRect
DrawIconEx
SetWindowPos
GetClientRect
PostMessageA
GetNextDlgTabItem
GetActiveWindow
LoadMenuA
DestroyMenu
GetSubMenu
TrackPopupMenuEx
DrawStateA
GetDC
ReleaseDC
InvalidateRect
GetWindowRect
SetCursor
ClientToScreen
WindowFromPoint
RegisterClipboardFormatA
GetSysColor
FillRect
FrameRect
CopyRect
InflateRect
OffsetRect
GetWindowLongA
GetParent
DestroyCursor
DestroyIcon
LoadImageA
CreateIconIndirect
GetIconInfo
IsWindowVisible
IsIconic
BringWindowToTop
GetFocus
GetAsyncKeyState
KillTimer
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
SetActiveWindow
SetForegroundWindow
SetRect
SetRectEmpty
EqualRect
PtInRect
FindWindowA
GetLastActivePopup
LoadCursorA
LoadCursorW
ChangeDisplaySettingsA
DefWindowProcA
SetLayeredWindowAttributes
OpenClipboard
CloseClipboard
SetClipboardData
EnableScrollBar
EmptyClipboard
SetClassLongA
SetWindowRgn
DrawEdge
DrawFrameControl
LoadMenuW
SetCursorPos
CopyIcon
DrawIcon
GetDCEx
LockWindowUpdate
GetTabbedTextExtentW
GetTabbedTextExtentA
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetComboBoxInfo
UpdateLayeredWindow
GetMenuItemID
gdi32
RectVisible
TextOutA
ExtTextOutA
DPtoLP
GetDeviceCaps
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
GetCurrentObject
ExtCreatePen
Polygon
CreateDCA
CreatePalette
GetDIBits
GetSystemPaletteEntries
RealizePalette
SelectPalette
StretchDIBits
SetStretchBltMode
StartDocA
EndDoc
StartPage
EndPage
SetAbortProc
CopyMetaFileA
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePatternBrush
CreateRectRgn
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PtVisible
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CombineRgn
SetRectRgn
GetTextMetricsA
GetCharWidthA
GetTextColor
GetRgnBox
GetNearestPaletteIndex
GetPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polyline
CreateRoundRectRgn
EnumFontFamiliesExA
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
AbortDoc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
GetWindowExtEx
GetMapMode
GetViewportExtEx
GetBkColor
Escape
CreateFontA
GetObjectA
SetTextColor
SetPixel
SetBkColor
SelectObject
GetStockObject
GetPixel
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
PolyDraw
LPtoDP
CreateFontIndirectA
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter
advapi32
RegSetValueExA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteExA
comctl32
_TrackMouseEvent
shlwapi
PathFileExistsA
PathGetArgsA
PathRelativePathToA
PathRemoveArgsA
PathUnquoteSpacesA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
UrlUnescapeA
PathRemoveFileSpecW
StrFormatKBSizeA
PathCanonicalizeA
uxtheme
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
ole32
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleSetMenuDescriptor
RevokeDragDrop
StringFromCLSID
CoLockObjectExternal
OleGetClipboard
PropVariantCopy
CoRegisterClassObject
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleRun
CoInitializeEx
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoRevokeClassObject
CoRegisterMessageFilter
OleLockRunning
RegisterDragDrop
oleaut32
SystemTimeToVariantTime
VariantChangeType
VarDateFromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysStringLen
SysReAllocStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
VariantTimeToSystemTime
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SysAllocStringLen
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SysAllocString
VarUdateFromDate
OleLoadPicture
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantInit
SafeArrayGetUBound
VariantClear
oledlg
ord8
gdiplus
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDrawImageI
GdipDeleteGraphics
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCreateBitmapFromFile
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
InternetErrorDlg
InternetGetCookieA
InternetSetCookieA
HttpQueryInfoA
HttpEndRequestA
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
GopherGetAttributeA
GopherOpenFileA
GopherFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpOpenFileA
FtpRenameFileA
FtpDeleteFileA
FtpGetFileA
FtpPutFileA
FtpFindFirstFileA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetSetOptionA
InternetQueryOptionA
InternetFindNextFileA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CONST Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 663KB - Virtual size: 662KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ