2024-09-29_532227d10542b6b834d23622b3640e0c_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-29_532227d10542b6b834d23622b3640e0c_avoslocker
Size

7.4MB
MD5

532227d10542b6b834d23622b3640e0c
SHA1

0cc5f93973192a7ef3b1a729d55f108cce83a18c
SHA256

2b1745630804f2705110a8eb8bf2123cc6d096f7c6effc319da7998f2c95e9b8
SHA512

7a2b86681ee2f11b9399cd7236ce2bf45d69a843778dc716c82cd3227d7082e6b7ce26ced673da6d0ab8d6eb77071cce3d747f020b924207a4a7faeb3e2c70bc
SSDEEP

98304:H/o+sqRtdd8LtT0On9mp0+IAsZYNnuWx94FGoXab0A7:A+sqRtML9rn9mStmnadXjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-29_532227d10542b6b834d23622b3640e0c_avoslocker

Files

2024-09-29_532227d10542b6b834d23622b3640e0c_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ