2024-09-06_45518fd0f75b7fdd5307e7c40c074fea_avoslocker | Triage

Sharing

General

Target

2024-09-06_45518fd0f75b7fdd5307e7c40c074fea_avoslocker
Size

4.5MB
MD5

45518fd0f75b7fdd5307e7c40c074fea
SHA1

d1b586cbcaa97ca4c755fe630c74902b0b60a203
SHA256

e818f1f73ba681e86749575c72f56a993ac676e92c9a1246185515808464bde3
SHA512

aa1318402d5b5b949dd82816bfeb8b7506306afeb0b3f08a617c6e68571c6cf4356e05a34dc294526434ef667419a068a46937671c63d7a742df2df68302cc00
SSDEEP

98304:JWqq+Mb+3yWvjIy5piWEvwDn7Nx99O+ajFv92+PQkAZj9j3onw/:JWaiWvjIy5pGvwDn7N3MTPjAZj9jYw/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_45518fd0f75b7fdd5307e7c40c074fea_avoslocker

Files

2024-09-06_45518fd0f75b7fdd5307e7c40c074fea_avoslocker
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ