Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-19_755773831c9e12037943c7f0d1ca8711_avoslocker_cobalt-strike.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-19_755773831c9e12037943c7f0d1ca8711_avoslocker_cobalt-strike.exe
Resource
win10v2004-20240611-en
Target
2024-06-19_755773831c9e12037943c7f0d1ca8711_avoslocker_cobalt-strike
Size
817KB
MD5
755773831c9e12037943c7f0d1ca8711
SHA1
8f206a2119b8fb4267127caf615f5a95f52b3791
SHA256
0ae7ed4bd2fdc42b1e674e4287a28d12aee069233377da02b1bd676041280f61
SHA512
92d443d4c8a7877ace1b0a7950d1e699f1eb78e37aa66bf397bb14aae7afeecf4c1183fa8a6e7c0defb60aae2ae6a0e8ef8f5b710b221a83a7e0fb9684964e1b
SSDEEP
24576:lkedhWYrdNQGji14WzovvYSNhZOLPr4b/OvJYAwA:lkedrdNQGmZ6zhZcPEb2JYAwA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\Bobo\GIT\APOConfig\Release\ClownfishVoicechanger.pdb
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptGetProperty
InternetQueryDataAvailable
HttpOpenRequestA
HttpQueryInfoW
InternetQueryOptionW
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
InternetSetOptionW
InternetReadFile
HttpAddRequestHeadersA
PathFileExistsW
freeaddrinfo
WSACleanup
__WSAFDIsSet
closesocket
gethostbyname
select
shutdown
getaddrinfo
WSAStartup
inet_addr
gethostbyaddr
send
socket
connect
WSAAddressToStringW
recv
htons
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
HeapFree
GetCurrentProcess
LocalAlloc
HeapAlloc
LocalFree
GetProcessHeap
MultiByteToWideChar
FormatMessageW
CreateDirectoryW
ReadFile
FindFirstFileW
CreateNamedPipeA
EnterCriticalSection
FindNextFileW
lstrlenW
WriteFile
lstrcpynW
GetUserDefaultUILanguage
LeaveCriticalSection
InitializeCriticalSection
CreateMutexW
InitializeCriticalSectionEx
FindClose
GetLocaleInfoW
WaitForSingleObject
CreateFileW
GetVersionExW
DisconnectNamedPipe
Sleep
GetLastError
GetCurrentThread
LoadLibraryA
ExitProcess
CloseHandle
LoadLibraryW
CreateThread
DecodePointer
GetProcAddress
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
ConnectNamedPipe
SetUnhandledExceptionFilter
FlushFileBuffers
GetExitCodeProcess
GetModuleFileNameA
SetLastError
OutputDebugStringA
GetEnvironmentVariableW
GetEnvironmentVariableA
GetFileAttributesW
SuspendThread
GetCurrentDirectoryA
ResumeThread
GetVersionExA
GetThreadContext
ReadProcessMemory
CreateEventExW
WaitForMultipleObjects
SetEvent
ResetEvent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RaiseException
RtlUnwind
GetStdHandle
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
EncodePointer
HeapReAlloc
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
GetModuleHandleExW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
HeapSize
WriteConsoleW
DeleteFileW
SetEndOfFile
InitializeCriticalSectionAndSpinCount
MessageBeep
RegisterClassExW
GetWindowPlacement
LoadAcceleratorsW
TrackPopupMenu
LoadStringW
GetSubMenu
ShowWindow
IsWindow
GetAsyncKeyState
OffsetRect
DispatchMessageW
SetTimer
CopyRect
SwitchToThisWindow
SetMenuItemInfoW
GetWindowTextA
SetWindowPlacement
SetMenuInfo
SetWindowTextA
SendDlgItemMessageW
DialogBoxIndirectParamW
MoveWindow
SetMenu
IsDlgButtonChecked
UnhookWindowsHookEx
DestroyMenu
SetFocus
TranslateAcceleratorW
FindWindowW
LoadCursorW
SendMessageA
SetWindowsHookExW
RemoveMenu
CheckMenuItem
GetDlgItem
AppendMenuW
SetRect
KillTimer
PostQuitMessage
GetDesktopWindow
GetParent
DialogBoxParamW
UpdateWindow
SetForegroundWindow
GetWindowLongW
GetMessageW
GetMenuItemInfoW
DefWindowProcW
LoadImageW
GetCursorPos
BeginPaint
EndPaint
EnableWindow
GetWindowTextW
ModifyMenuW
AdjustWindowRectEx
LoadMenuW
PostMessageW
GetWindowRect
DestroyWindow
SetWindowPos
MessageBoxW
GetMenuItemCount
CreateWindowExW
SendMessageW
CallNextHookEx
EndDialog
MessageBoxA
SetWindowTextW
TranslateMessage
GetStockObject
SetTextColor
SetBkMode
GetObjectW
DeleteObject
CreateFontIndirectW
CreateSolidBrush
GetOpenFileNameW
GetSaveFileNameW
GetUserNameA
SetEntriesInAclA
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
InitializeSecurityDescriptor
RegSetValueExW
RegEnumKeyExW
AllocateAndInitializeSid
RegCloseKey
SetSecurityDescriptorDacl
CryptReleaseContext
CryptGetHashParam
RegCreateKeyW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHFileOperationW
SHGetFolderPathW
Shell_NotifyIconW
ShellExecuteW
CoTaskMemAlloc
CoInitializeEx
PropVariantClear
OleInitialize
CoUninitialize
OleUninitialize
CoTaskMemFree
CLSIDFromString
CoCreateInstance
VariantInit
VariantClear
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ