2024-06-25_08fc557173183d44ff6986c924cb3a20_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-25_08fc557173183d44ff6986c924cb3a20_avoslocker
Size

11.4MB
MD5

08fc557173183d44ff6986c924cb3a20
SHA1

c08ec637908a31bd759c8d02ba4b585a3cce0d8c
SHA256

4c67bc4c5c3cb02fb875d031b032dfc4f9085ba144e3a70f3a5d4127e19a99e9
SHA512

a4d5dc2193befcdcd0e3b07ffc29ea721cfa063b6095d5e6592b45b8d315a281d107811c3c151f753cfb0aebf40111ebc06ed559abb055c3f387f3969fdfe566
SSDEEP

196608:bpzDh6Sk0YINEdZXXg8gJsv6tWKFdu9ClU:FzF6frdhw8gJsv6tWKFdu9C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-25_08fc557173183d44ff6986c924cb3a20_avoslocker

Files

2024-06-25_08fc557173183d44ff6986c924cb3a20_avoslocker
.exe windows:6 windows x86 arch:x86

42854dd5c70814cb91428c1561b556fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
GetObjectW
GetTextFaceW
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers
GetBitmapBits
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
GetOutlineTextMetricsW
GetTextExtentPoint32W
GetCharABCWidthsI
SetBkMode
SetGraphicsMode
SetTextColor
SetTextAlign
SetWorldTransform
ExtTextOutW
CreateCompatibleDC
CreateRectRgn
DeleteDC
DeleteObject
CreateBitmap
GetDIBits
GetRegionData
SelectClipRgn
SelectObject
CreateDIBSection
GdiFlush
BitBlt
OffsetRgn
GetDeviceCaps
CreateCompatibleBitmap
CreateDCW
EnumFontFamiliesExW
CreateFontIndirectW
GetFontData
CombineRgn

ole32

CoUninitialize
CoTaskMemAlloc
CoGetMalloc
ReleaseStgMedium
CoTaskMemFree
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
CoCreateGuid
CoInitialize
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoCreateInstance
StringFromGUID2

imm32

ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey
ImmGetContext
ImmGetDefaultIMEWnd

winmm

PlaySoundW

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantInit
VariantChangeType
SystemTimeToVariantTime

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
SHGetSpecialFolderPathW
SHBrowseForFolderW

user32

SetFocus
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
SetWindowPos
MoveWindow
FlashWindowEx
RealGetWindowClassW
EnumWindows
GetWindowTextW
GetMessageExtraInfo
ShowWindow
IsChild
TrackMouseEvent
GetCursorInfo
SetWindowTextW
GetWindowRect
AdjustWindowRectEx
SetCursor
ClientToScreen
ScreenToClient
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
SetParent
DestroyCursor
GetAncestor
GetKeyboardLayoutList
UnregisterClassW
GetClassInfoW
RegisterClassExW
GetFocus
GetCapture
GetCursorPos
ChildWindowFromPointEx
GetSysColorBrush
GetMonitorInfoW
EnumDisplayMonitors
LoadIconW
SetClipboardViewer
ChangeClipboardChain
GetWindowThreadProcessId
RegisterClipboardFormatW
GetAsyncKeyState
GetKeyboardLayout
CreateCaret
DestroyCaret
HideCaret
SetCaretPos
PeekMessageW
IsZoomed
GetKeyState
GetKeyboardState
ToAscii
ToUnicode
MapVirtualKeyW
GetMenu
TrackPopupMenuEx
SetMenuItemInfoW
NotifyWinEvent
RegisterClassW
GetClipboardFormatNameW
SetCursorPos
GetCursor
LoadCursorW
CreateCursor
SetCapture
GetIconInfo
CreateIconIndirect
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRect
GetClientRect
InvalidateRect
SendMessageW
ReleaseCapture
GetDC
ReleaseDC
GetSystemMenu
EnableMenuItem
GetSystemMetrics
GetSysColor
SystemParametersInfoW
DefWindowProcW
DestroyWindow
SetWindowRgn
DestroyIcon
LoadImageW
RegisterWindowMessageW
GetDoubleClickTime
GetCaretBlinkTime
MessageBeep
PostMessageW
CreateWindowExW
CharNextExA
CallNextHookEx
MessageBoxW
DrawIconEx
PostThreadMessageW
TranslateMessage
DispatchMessageW
GetQueueStatus
MsgWaitForMultipleObjectsEx
SetTimer
KillTimer
SetWindowsHookExW
UnhookWindowsHookEx

iphlpapi

GetAdaptersInfo
GetAdaptersAddresses

advapi32

RegFlushKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
CopySid
FreeSid
GetLengthSid
GetTokenInformation
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW

kernel32

SetLastError
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
CreateMutexW
ReleaseMutex
GetConsoleMode
GetConsoleOutputCP
SetFileAttributesW
SetStdHandle
HeapFree
HeapAlloc
DecodePointer
EnumSystemLocalesW
HeapReAlloc
GetFileSizeEx
SetEnvironmentVariableW
IsValidCodePage
GetACP
GetOEMCP
GetUserGeoID
GetGeoInfoW
GetTimeZoneInformation
FreeLibrary
MultiByteToWideChar
FindNextFileW
FindFirstFileExW
FindNextChangeNotification
FindFirstChangeNotificationW
FindCloseChangeNotification
WriteFileEx
SleepEx
CancelIo
PeekNamedPipe
ReadFileEx
MoveFileExW
SetFilePointerEx
SetEndOfFile
ReadConsoleW
FlushFileBuffers
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
MoveFileW
CopyFileW
GetTempPathW
RemoveDirectoryW
GetLogicalDrives
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
GetFileAttributesExW
GetModuleFileNameW
GetStartupInfoW
GetUserDefaultUILanguage
GetCurrencyFormatW
GetTimeFormatW
GetDateFormatW
ResetEvent
GetSystemDirectoryW
LCMapStringW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
GetSystemInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
TerminateThread
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
CreateThread
SwitchToThread
GetProcessId
GetExitCodeProcess
GetCurrentProcess
Sleep
CreateNamedPipeW
ConnectNamedPipe
DuplicateHandle
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocalTime
GetSystemTime
WaitForSingleObjectEx
GetCommandLineA
ExitThread
FileTimeToSystemTime
FreeLibraryAndExitThread
GetCPInfo
GetProcessHeap
GetStringTypeW
WriteConsoleW
GetFileType
CloseHandle
TerminateProcess
OpenProcess
LocalFree
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
K32GetModuleFileNameExW
GetLastError
WaitForSingleObject
GetVolumeInformationW
GetLongPathNameW
GetDriveTypeW
GetProcAddress
lstrcmpW
FormatMessageW
LoadLibraryW
GetModuleHandleW
IsValidLanguageGroup
IsValidLocale
SetErrorMode
ExpandEnvironmentStringsW
CreateProcessW
GetUserDefaultLangID
CheckRemoteDebuggerPresent
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocaleInfoW
LoadLibraryA
GlobalSize
GetCurrentProcessId
CreateFileW
ReadFile
SetFilePointer
WriteFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
GetConsoleWindow
GetModuleHandleA
ExitProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DeviceIoControl
CreateEventW
WaitForMultipleObjects
SetHandleInformation
CompareStringW
GetUserDefaultLCID
GetCommandLineW
SetEvent
HeapSize

opengl32

glTexParameteri
glTexParameterfv
glTexParameterf
glTexImage2D
glStencilOp
glStencilMask
glStencilFunc
glScissor
glReadPixels
glPolygonOffset
glPixelStorei
glLineWidth
glIsTexture
glIsEnabled
glHint
glGetTexParameteriv
glGetTexParameterfv
glTexParameteriv
glGetIntegerv
glGetFloatv
glGetError
glGetBooleanv
glGenTextures
glFrontFace
glFlush
glFinish
glEnable
glDrawElements
glDrawArrays
glDisable
glDepthRange
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearStencil
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
glTexSubImage2D
glViewport
glGetString

ws2_32

gethostbyaddr
inet_addr
WSASocketW
WSASendTo
WSASend
WSARecvFrom
WSARecv
WSANtohs
WSANtohl
WSAIoctl
WSAHtonl
WSAConnect
gethostbyname
setsockopt
select
ntohl
listen
htons
getsockname
getpeername
closesocket
bind
__WSAFDIsSet
getsockopt
htonl
WSAStartup
gethostname
WSACleanup
WSAAsyncSelect
WSAAccept
WSAGetLastError

Sections

.text
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42854dd5c70814cb91428c1561b556fd

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

ole32

imm32

winmm

oleaut32

shell32

user32

iphlpapi

advapi32

kernel32

opengl32

ws2_32

Sections

.text Size: 7.2MB - Virtual size: 7.2MB

.rdata Size: 3.7MB - Virtual size: 3.7MB

.data Size: 120KB - Virtual size: 167KB

.qtmetad Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 13B

.gfids Size: 512B - Virtual size: 400B

_RDATA Size: 1024B - Virtual size: 560B

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 240KB - Virtual size: 239KB

.text
Size: 7.2MB - Virtual size: 7.2MB

.rdata
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 120KB - Virtual size: 167KB

.qtmetad
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 13B

.gfids
Size: 512B - Virtual size: 400B

_RDATA
Size: 1024B - Virtual size: 560B

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 240KB - Virtual size: 239KB