2024-08-09_820538e507312f11d3ed6fba57a68283_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-09_820538e507312f11d3ed6fba57a68283_avoslocker
Size

6.9MB
MD5

820538e507312f11d3ed6fba57a68283
SHA1

6c49c39604e304dd1beb711c467874f7e7db7469
SHA256

7a3810fc827b15a9d5d9f3380d895c34cfa9b464b49e88320004006430e399ff
SHA512

a288730ab0c5bef7cc2f7bd70c48360a76f60bc4ac8aab44ddf294e3c81879effd3244a03dcbbb85a3ef1ae849cf2a094cf58c747aa82edd9a345e080167c5f7
SSDEEP

98304:MF/tIyYYj1K9WR2jeJMJ2FdztPNNmp89jy:6tIk2j2FdzFmp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-09_820538e507312f11d3ed6fba57a68283_avoslocker

Files

2024-08-09_820538e507312f11d3ed6fba57a68283_avoslocker
.exe windows:6 windows x86 arch:x86

fc91f2e268af185e5284255b0c01f832

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_43

D3DXMatrixRotationQuaternion
D3DXMatrixDecompose
D3DXLoadSurfaceFromSurface
D3DXMatrixTranspose
D3DXMatrixRotationAxis
D3DXComputeNormals
D3DXVec3TransformCoord
D3DXMatrixTranslation
D3DXMatrixRotationY
D3DXMatrixRotationZ
D3DXVec3Normalize
D3DXVec3TransformNormal
D3DXCreateMeshFVF
D3DXLoadMeshFromXW
D3DXCreateTextureFromFileInMemoryEx
D3DXGetFVFVertexSize
D3DXLoadMeshFromXInMemory
D3DXComputeBoundingSphere
D3DXCreateTextureFromFileExW
D3DXMatrixScaling
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXComputeNormalMap
D3DXMatrixInverse
D3DXCreateTexture
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXCreateEffect
D3DXVec4Transform
D3DXMatrixRotationX
D3DXMatrixMultiply

winmm

mmioDescend
mmioStringToFOURCCW
mmioRead
mmioSeek
mmioOpenW

kernel32

FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStdHandle
GetConsoleMode
ReadFile
InitializeCriticalSectionEx
GetTempPathW
LoadLibraryW
HeapFree
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
WriteFile
DeleteFileW
CopyFileW
WaitForSingleObject
Sleep
CloseHandle
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpyW
GetCommandLineW
TlsSetValue
TlsGetValue
LoadLibraryExW
TlsAlloc
TlsFree
EnterCriticalSection
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetVersionExW
ReadConsoleW
GetProcAddress
LocalFree
SetThreadExecutionState
GetModuleHandleW
FreeLibrary
GetCurrentProcess
lstrlenW
ExpandEnvironmentStringsW
GetFileAttributesW
GetVersionExA
QueryPerformanceFrequency
QueryPerformanceCounter
ResetEvent
SetEvent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetSystemTimeAsFileTime
SwitchToThread
CreateEventW
SetLastError
GetStringTypeW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
OutputDebugStringW
RtlUnwind
CreateFileW
GetDriveTypeW
GetCurrentDirectoryW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetFullPathNameW
SetStdHandle
FindClose
GetConsoleCP
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
MultiByteToWideChar
GetModuleHandleExW
SetEndOfFile

user32

RegisterClassW
SetWindowPlacement
AdjustWindowRect
GetWindowPlacement
CallNextHookEx
GetIconInfo
IsWindowVisible
SetMenu
UnhookWindowsHookEx
DestroyMenu
ClipCursor
SetWindowsHookExW
GetDC
DestroyWindow
GetMenu
SetWindowLongW
IsZoomed
GetWindowLongW
EnumDisplaySettingsW
SystemParametersInfoA
GetClassLongW
SetRect
SystemParametersInfoW
IsIconic
ReleaseDC
GetWindowTextW
SetWindowPos
CreateWindowExW
GetSystemMetrics
DispatchMessageW
PeekMessageW
TranslateMessage
GetClientRect
DefWindowProcW
MessageBoxW
SendMessageW
ShowWindow
PostQuitMessage
BeginPaint
EndPaint
GetWindow
GetWindowRect
ScreenToClient
InvalidateRect
GetCursorPos
UnregisterClassW
RegisterClassExW
LoadIconW
LoadCursorW
SetCursor
GetMonitorInfoW
LoadStringW

gdi32

GetObjectW
GetStockObject
SelectObject
CreateCompatibleDC
DeleteDC
GetDIBits
DeleteObject

shell32

ShellExecuteW
CommandLineToArgvW
ExtractIconW

ole32

CoCreateGuid
CLSIDFromString
CoCreateInstance
CoInitialize
StringFromGUID2

oleaut32

SysAllocString
SysFreeString

comctl32

ord17

shlwapi

PathFindFileNameW
PathFileExistsW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc91f2e268af185e5284255b0c01f832

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9_43

winmm

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 327KB - Virtual size: 327KB

.data Size: 48KB - Virtual size: 60KB

.rsrc Size: 4.9MB - Virtual size: 4.9MB

.reloc Size: 111KB - Virtual size: 110KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 327KB - Virtual size: 327KB

.data
Size: 48KB - Virtual size: 60KB

.rsrc
Size: 4.9MB - Virtual size: 4.9MB

.reloc
Size: 111KB - Virtual size: 110KB