2024-09-12_eda494746badf7e15d0f7c45023d0045_avoslocker | Triage

Sharing

General

Target

2024-09-12_eda494746badf7e15d0f7c45023d0045_avoslocker
Size

7.3MB
MD5

eda494746badf7e15d0f7c45023d0045
SHA1

9fdd05c57ddc41e8f3d60419d466cfdbae86d5b1
SHA256

9a9402ceb694443b9a231f67539ca291677df16f948def2f6ce0f2ac49f1473d
SHA512

71d9b1e09bf9b86e505a4b0e5a5846c6ca8844236d8b46dd80661e3c5ba18102ad757d64c98b9006dbabe6054b1fd0ae576ea218e8c44aaf1a31d5eeca03b156
SSDEEP

98304:g+BPc9rUoflanoCoN2ck3q2TfUvuQsRwAx8nfJVAsh+bQYv:sUoflrCOP2Tf4XgSf5hzi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-12_eda494746badf7e15d0f7c45023d0045_avoslocker

Files

2024-09-12_eda494746badf7e15d0f7c45023d0045_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 918KB - Virtual size: 917KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ