2024-08-11_3412ddf659a0b43a25b94c3492fd7b9c_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-11_3412ddf659a0b43a25b94c3492fd7b9c_avoslocker
Size

6.8MB
MD5

3412ddf659a0b43a25b94c3492fd7b9c
SHA1

8d8c7d1b3deb4e4b261395f89ff33a0cfe582af2
SHA256

e79a57316ab2f0f6f25a17553cbe29c2ab589119ee7449c5d9e5d0139505c57a
SHA512

fd417470c471c3ae7af60904a57da2780bec567d492f679e831e7dcd0f66f6eaf92e9a51e6b41dee5fbc42e2c3bd1ff4ff526067d2259629f4e153dde0d07980
SSDEEP

98304:79rOvi3HzBvnKFn0MeYttysOx6VamqSJ5a4fuWb/Ln:hrOvijBGnBeYtAX+q05aWuEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-11_3412ddf659a0b43a25b94c3492fd7b9c_avoslocker

Files

2024-08-11_3412ddf659a0b43a25b94c3492fd7b9c_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 873KB - Virtual size: 873KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ