2024-07-08_97d177bcff94ed08e21673af06d96231_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-08_97d177bcff94ed08e21673af06d96231_avoslocker
Size

1.4MB
MD5

97d177bcff94ed08e21673af06d96231
SHA1

50e1ca4d7db9f892247dabdfb2091c2e96efd18c
SHA256

1cba1373801e25965180c97f1708f75f2cbf586426b74d1d20961d27a0cbe456
SHA512

21c88354857f45573a3f2d43cf79d1f84cbb20db7e341f78ed2a11b36dfd34965fcc79484e9ff682264fe8ec83149acaa0405d3aa3a13ded7c4d1d57c3da8d4c
SSDEEP

24576:H4k9h2dssoUo6mz0uIhX6dWA2Eep7uUWLCc8WnoHab1Gv4aK1YEUrOB9T5V9S7SO:Yyh2dssoURS0uIZEe+LCc8Wno/v4xYrL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-08_97d177bcff94ed08e21673af06d96231_avoslocker

Files

2024-07-08_97d177bcff94ed08e21673af06d96231_avoslocker
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ