2024-09-26_47a79a76b2d6548481ace6e4dfcd3ce3_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-26_47a79a76b2d6548481ace6e4dfcd3ce3_avoslocker
Size

7.4MB
MD5

47a79a76b2d6548481ace6e4dfcd3ce3
SHA1

ca61ec6baaceefde7d0ae028788208bea2c98678
SHA256

ba3460c20d4f3ebaefeb2795e35201538c128c363bef7971c2e558f4ee7c033c
SHA512

ded7235644078b93492ff293de84b094bf88a251206001fb7a557717efeec3e77bf75cdc6386f09ef1f240d5fbf1ed08d044774be9d48eb8adf0ce2ee3980f59
SSDEEP

98304:G4h5PfhefTAv8HM2JyiFpK6FR4FBm21BgdKqyyIab0AzW:j5PfhoAUs2JyEYxBnjIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-26_47a79a76b2d6548481ace6e4dfcd3ce3_avoslocker

Files

2024-09-26_47a79a76b2d6548481ace6e4dfcd3ce3_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ