Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-04_b0acc1f1cbc3454c63b9a8090f9457e1_avoslocker_revil.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-07-04_b0acc1f1cbc3454c63b9a8090f9457e1_avoslocker_revil.exe
Resource
win10v2004-20240508-en
Target
2024-07-04_b0acc1f1cbc3454c63b9a8090f9457e1_avoslocker_revil
Size
4.1MB
MD5
b0acc1f1cbc3454c63b9a8090f9457e1
SHA1
4951581532afff16730dddf7c2482f9ee9db7745
SHA256
82df6cb4b96b3a38c0b77f20e00c7595951e8a65953fb7260d6a8a6fb46b43d8
SHA512
5c5d4fb4cbcfcb9ca001c6b8074bf4ac79889703267568941d88fc905383d3ea134f854c4cf64307e6c6c7c012e8fc19c5bf3ffc90a0f67b79f15cb2a915ad1b
SSDEEP
98304:9/vuy9hS9TyJz73L566NaRKEloX6IlI8AVtCFYGdn9+rzlRYa:duy9hS9TyJz73L566NaRKEloX6Ilpig0
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\Webhost\28-06-2024\WindowsBuilds\MYCOMPUTER_ACTIVEX\8618935\mycomp\mycomp\DesktopCentral\ZohoMeetingApp\ZAAudio\ZAAudioClient\bin\Win32\Release\ZAAudioClient.pdb
getpeername
bind
accept
ntohs
WSACleanup
WSAStartup
send
sendto
setsockopt
shutdown
WSARecv
WSARecvFrom
WSASend
getsockopt
ntohl
getaddrinfo
ioctlsocket
htons
connect
socket
inet_addr
closesocket
freeaddrinfo
listen
WSAIoctl
WSASetLastError
recv
getsockname
WSASendTo
recvfrom
WSAGetLastError
CertOpenStore
CertFreeCertificateChain
CertCloseStore
CertGetNameStringA
CertEnumCertificatesInStore
CertOpenSystemStoreW
CertFreeCertificateContext
CertGetCertificateChain
CertCreateCertificateContext
CertGetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertFindCertificateInStore
CertDuplicateCertificateContext
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
LocalAlloc
ProcessIdToSessionId
FormatMessageW
GlobalAlloc
GlobalFree
CloseHandle
LocalFree
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
CreateEventW
SetEvent
CreateEventExW
SetThreadPriority
WaitForSingleObject
GetCurrentThread
CreateThread
ResetEvent
GetVersionExW
Sleep
CreateDirectoryW
SetLastError
GetCommandLineW
GetCurrentProcess
InitializeCriticalSection
MoveFileW
InterlockedDecrement
GetExitCodeThread
CreateMutexW
FormatMessageA
CancelSynchronousIo
OpenEventW
ReadFile
WriteFile
FlushFileBuffers
CreateFileW
GetCurrentProcessId
GetModuleFileNameW
WideCharToMultiByte
DeleteCriticalSection
MultiByteToWideChar
GetCurrentThreadId
GetProcessHeap
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
FindResourceExW
RaiseException
HeapReAlloc
LockResource
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
SizeofResource
GetDriveTypeW
ReadConsoleA
SetConsoleMode
LoadLibraryA
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
DeleteFiber
SwitchToFiber
SystemTimeToFileTime
GetSystemTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetConsoleCtrlHandler
SetStdHandle
ReadConsoleW
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ExitThread
GetCommandLineA
ExitProcess
WriteConsoleW
GetFileType
GetConsoleMode
GetConsoleCP
SetFilePointerEx
FileTimeToSystemTime
GetFullPathNameW
GetStartupInfoW
WaitForSingleObjectEx
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
VirtualQuery
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetStringTypeW
QueryPerformanceFrequency
EncodePointer
QueueUserWorkItem
GetModuleHandleExW
DuplicateHandle
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
GetTimeZoneInformation
GetEnvironmentVariableW
SetEnvironmentVariableW
GetComputerNameW
GetCurrentDirectoryW
GetLongPathNameW
GetSystemDirectoryW
SetFilePointer
GetStdHandle
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
RemoveDirectoryW
SetEndOfFile
MoveFileExW
FindClose
FindFirstFileW
FindNextFileW
ReleaseMutex
GetHandleInformation
CreateIoCompletionPort
GetQueuedCompletionStatusEx
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
GetTickCount64
SetFileCompletionNotificationModes
RtlUnwind
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
RegisterEventSourceW
CryptGenRandom
CryptSignHashW
CryptDestroyHash
GetTokenInformation
ConvertSidToStringSidW
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
CreateWellKnownSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
DeregisterEventSource
CryptEnumProvidersW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CommandLineToArgvW
SHGetFolderPathW
PropVariantClear
CoTaskMemFree
CoInitializeEx
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
AvSetMmThreadCharacteristicsW
AvRevertMmThreadCharacteristics
BCryptGenRandom
??0ClientConnection@Connection@@QAE@$$QAV01@@Z
??0ClientConnection@Connection@@QAE@ABV01@@Z
??0ClientConnection@Connection@@QAE@XZ
??0HttpClient@0HttpHandler@@QAE@$$QAV001@@Z
??0HttpClient@0HttpHandler@@QAE@ABV001@@Z
??0HttpClient@0HttpHandler@@QAE@XZ
??0dcSocket@ClientSocket@SocketUtils@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N1@Z
??0dcSocket@ClientSocket@SocketUtils@@QAE@XZ
??0dcWebSocket@ClientSocket@SocketUtils@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N001@Z
??0dcWebSocket@ClientSocket@SocketUtils@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N0@Z
??0dcWebSocket@ClientSocket@SocketUtils@@QAE@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N0H000@Z
??0dcWebSocket@ClientSocket@SocketUtils@@QAE@XZ
??0socketWrapper@ClientSocket@SocketUtils@@QAE@ABV012@@Z
??0socketWrapper@ClientSocket@SocketUtils@@QAE@XZ
??1ClientConnection@Connection@@QAE@XZ
??1HttpClient@0HttpHandler@@QAE@XZ
??1dcSocket@ClientSocket@SocketUtils@@UAE@XZ
??1dcWebSocket@ClientSocket@SocketUtils@@UAE@XZ
??1socketWrapper@ClientSocket@SocketUtils@@UAE@XZ
??4ClientConnection@Connection@@QAEAAV01@$$QAV01@@Z
??4ClientConnection@Connection@@QAEAAV01@ABV01@@Z
??4HttpClient@0HttpHandler@@QAEAAV001@$$QAV001@@Z
??4HttpClient@0HttpHandler@@QAEAAV001@ABV001@@Z
??4socketWrapper@ClientSocket@SocketUtils@@QAEAAV012@ABV012@@Z
??_7ClientConnection@Connection@@6B@
??_7HttpClient@0HttpHandler@@6B@
??_7dcSocket@ClientSocket@SocketUtils@@6BClientConnection@Connection@@@
??_7dcSocket@ClientSocket@SocketUtils@@6BIReferenceCounter@@@
??_7dcWebSocket@ClientSocket@SocketUtils@@6B@
??_7dcWebSocket@ClientSocket@SocketUtils@@6BClientConnection@Connection@@@
??_7dcWebSocket@ClientSocket@SocketUtils@@6BIReferenceCounter@@@
??_7socketWrapper@ClientSocket@SocketUtils@@6BClientConnection@Connection@@@
??_7socketWrapper@ClientSocket@SocketUtils@@6BIReferenceCounter@@@
?DestroySocket@dcSocket@ClientSocket@SocketUtils@@UAEXXZ
?InitSDPOffer@dcWebSocket@ClientSocket@SocketUtils@@UAE_NXZ
?checkSenderThreadStatus@dcSocket@ClientSocket@SocketUtils@@MAE_NXZ
?cleanup@dcWebSocket@ClientSocket@SocketUtils@@UAEXXZ
?close@dcWebSocket@ClientSocket@SocketUtils@@UAEXXZ
?connect@dcWebSocket@ClientSocket@SocketUtils@@UAE_NXZ
?connectViaProxy@dcWebSocket@ClientSocket@SocketUtils@@UAE_NXZ
?getConnectedInterfaceID@socketWrapper@ClientSocket@SocketUtils@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getIsCertValidationNeeded@socketWrapper@ClientSocket@SocketUtils@@UAE_NXZ
?getIsSystemMode@socketWrapper@ClientSocket@SocketUtils@@UAE_NXZ
?getLastError@socketWrapper@ClientSocket@SocketUtils@@UAEHXZ
?getLastErrorMsg@socketWrapper@ClientSocket@SocketUtils@@UAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getProxyHostName@socketWrapper@ClientSocket@SocketUtils@@UAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getProxyPassword@socketWrapper@ClientSocket@SocketUtils@@UAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getProxyPort@socketWrapper@ClientSocket@SocketUtils@@UAEHXZ
?getProxyUserName@socketWrapper@ClientSocket@SocketUtils@@UAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getServerHostName@socketWrapper@ClientSocket@SocketUtils@@UAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getServerPort@socketWrapper@ClientSocket@SocketUtils@@UAEHXZ
?initSocketConfigurations@dcWebSocket@ClientSocket@SocketUtils@@AAE_NXZ
?initialize@dcWebSocket@ClientSocket@SocketUtils@@UAEXXZ
?isProxyEnabled@socketWrapper@ClientSocket@SocketUtils@@UAE_NXZ
?isSecureMode@socketWrapper@ClientSocket@SocketUtils@@UAE_NXZ
?isSocketLive@dcWebSocket@ClientSocket@SocketUtils@@UAE_NXZ
?receiveBytes@dcWebSocket@ClientSocket@SocketUtils@@UAEHPAEH@Z
?receiveString@dcWebSocket@ClientSocket@SocketUtils@@UAEHPADH@Z
?sendBytes@dcWebSocket@ClientSocket@SocketUtils@@UAEHPAEH@Z
?sendBytesAsync@dcSocket@ClientSocket@SocketUtils@@UAE_NPAEH@Z
?sendFrameAsync@dcSocket@ClientSocket@SocketUtils@@UAEXAAV?$SmartPtr@VDataFrame@@@@@Z
?sendString@dcWebSocket@ClientSocket@SocketUtils@@UAEHPAD@Z
?sendString@dcWebSocket@ClientSocket@SocketUtils@@UAEHPADH@Z
?sendStringAsync@dcSocket@ClientSocket@SocketUtils@@UAE_NPAD@Z
?sendStringAsync@dcSocket@ClientSocket@SocketUtils@@UAE_NPADH@Z
?sendVectorAsync@dcSocket@ClientSocket@SocketUtils@@UAEXAAV?$vector@DV?$allocator@D@std@@@std@@@Z
?setCandidate@dcWebSocket@ClientSocket@SocketUtils@@UAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setCandidateReceiver@dcWebSocket@ClientSocket@SocketUtils@@UAE_NP6A_NPAD@Z@Z
?setConnectionDetails@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N0H00_J@Z
?setConnectionDetails@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N@Z
?setConnectionMode@socketWrapper@ClientSocket@SocketUtils@@UAEX_N@Z
?setDataChannelStateReceiver@dcWebSocket@ClientSocket@SocketUtils@@UAE_NP6A_NPAD@Z@Z
?setErrorReceiver@dcWebSocket@ClientSocket@SocketUtils@@UAE_NP6A_NHPBD@Z@Z
?setIsCertValidationNeeded@socketWrapper@ClientSocket@SocketUtils@@UAEX_N@Z
?setIsSystemMode@socketWrapper@ClientSocket@SocketUtils@@UAEX_N@Z
?setLastError@dcSocket@ClientSocket@SocketUtils@@MAEXH@Z
?setLastError@dcSocket@ClientSocket@SocketUtils@@MAEXHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setLastError@socketWrapper@ClientSocket@SocketUtils@@MAEXH@Z
?setLastError@socketWrapper@ClientSocket@SocketUtils@@MAEXHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setLastWinErrorCode@socketWrapper@ClientSocket@SocketUtils@@MAEXH@Z
?setLoggerConfigurations@dcSocket@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?setPocoObjectReferences@dcWebSocket@ClientSocket@SocketUtils@@AAEXXZ
?setProxyDetails@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H00@Z
?setProxyHostName@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setProxyPassword@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setProxyPort@socketWrapper@ClientSocket@SocketUtils@@UAEXH@Z
?setProxySwitch@socketWrapper@ClientSocket@SocketUtils@@UAEX_N@Z
?setProxyUserName@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setSDPHandShakeMessage@dcWebSocket@ClientSocket@SocketUtils@@UAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setSDPReceiver@dcWebSocket@ClientSocket@SocketUtils@@UAE_NP6A_NPAD@Z@Z
?setServerEndpoint@dcSocket@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setServerHostName@socketWrapper@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setServerPort@socketWrapper@ClientSocket@SocketUtils@@UAEXH@Z
?setTurnInfo@dcWebSocket@ClientSocket@SocketUtils@@UAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z
?shutDownSocket@dcWebSocket@ClientSocket@SocketUtils@@UAEXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ