2024-06-25_04fe123abf1798e5748f39ec990ab9b0_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-25_04fe123abf1798e5748f39ec990ab9b0_avoslocker
Size

6.8MB
MD5

04fe123abf1798e5748f39ec990ab9b0
SHA1

0fe7d496589703e43b0393a25e02cd4f918990bc
SHA256

cbfbe565caea2429c98a32c5c6bc310bccf3d857cc9b451f78a7ec813141752f
SHA512

c5c779e9ea09e427cc0467ad908b6f5d6fd8df38746d8db0f1429ae917252d9f36364bb8521ac57f50f1a499cf2838f8d32a22d8a73891c483269b6982bfa73d
SSDEEP

98304:J9rOvi3HzBvnKFn0MeYttysOx6VamqSJ5a4f9Wb/L5:XrOvijBGnBeYtAX+q05aW9E1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-25_04fe123abf1798e5748f39ec990ab9b0_avoslocker

Files

2024-06-25_04fe123abf1798e5748f39ec990ab9b0_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 873KB - Virtual size: 873KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ