2024-09-13_374d09e8341cdfbea169cf59d99f332f_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_374d09e8341cdfbea169cf59d99f332f_avoslocker
Size

7.4MB
MD5

374d09e8341cdfbea169cf59d99f332f
SHA1

46d0789a6263e736470bd99932e4ac184af8b98c
SHA256

76bf62ce240c41e2130246c58f922a758823f841d7808c7d0697eaec57dc210e
SHA512

5efce2ad624abb9f5d1a78db5ae8501950b292438d0d1bef0ee77fe346130af376e0198f3b4279fb17ccce703df641e0d1da4a203a69bf04f6dfd2c903e913bd
SSDEEP

98304:S4h5PfhefTAv8HM2JyiFpK6FR4FBm21BgdKqyyHab0AY:X5PfhoAUs2JyEYxBojr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_374d09e8341cdfbea169cf59d99f332f_avoslocker

Files

2024-09-13_374d09e8341cdfbea169cf59d99f332f_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ