2024-09-30_ea2ef987cf13b207e1412e5d2c6086ce_avoslocker

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-30_ea2ef987cf13b207e1412e5d2c6086ce_avoslocker
Size

3.9MB
MD5

ea2ef987cf13b207e1412e5d2c6086ce
SHA1

773d1729c7248b4389dd92e61cd8268dbbcd4b9f
SHA256

1f7d283fe671b2ba2fdb373bdf7663cee00f4b5534af0018236485591dde2ca5
SHA512

a7cdd6c7d6ea82b7362bb6575471c898f27a793257e7d0b51ec2f7d4c224ea05b243b745ee25e726e1ced3e157b782f687db64f5e9d13fa231ab89966b2ebf4f
SSDEEP

49152:Vdv+0Nz5oa31SYEIqn9U7Aj91o6fxbYiT6yIE2pc4kM89jP3AL+:Vdv9NzFbEXjXo6JbYi+04kM89z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-30_ea2ef987cf13b207e1412e5d2c6086ce_avoslocker

Files

2024-09-30_ea2ef987cf13b207e1412e5d2c6086ce_avoslocker
.exe windows:6 windows x86 arch:x86

8dac049854e19f0a1724326fdbb8caba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_43

D3DXLoadSurfaceFromSurface
D3DXMatrixTranspose
D3DXMatrixRotationAxis
D3DXMatrixScaling
D3DXComputeNormals
D3DXMatrixTranslation
D3DXMatrixRotationY
D3DXMatrixRotationZ
D3DXVec3Normalize
D3DXVec3TransformNormal
D3DXCreateMeshFVF
D3DXLoadMeshFromXW
D3DXCreateTextureFromFileInMemoryEx
D3DXGetFVFVertexSize
D3DXLoadMeshFromXInMemory
D3DXCreateTextureFromFileExW
D3DXComputeBoundingSphere
D3DXVec3TransformCoord
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXComputeNormalMap
D3DXMatrixInverse
D3DXCreateTexture
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXCreateEffect
D3DXVec4Transform
D3DXMatrixRotationX
D3DXMatrixMultiply

winmm

mmioDescend
mmioStringToFOURCCW
mmioSeek
mmioRead
mmioOpenW

kernel32

FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStdHandle
GetConsoleMode
ReadFile
InitializeCriticalSectionEx
GetTempPathW
LoadLibraryW
HeapFree
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
WriteFile
DeleteFileW
CopyFileW
WaitForSingleObject
Sleep
CloseHandle
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpyW
GetCommandLineW
TlsSetValue
TlsGetValue
LoadLibraryExW
TlsAlloc
TlsFree
EnterCriticalSection
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetVersionExW
ReadConsoleW
GetProcAddress
LocalFree
SetThreadExecutionState
GetModuleHandleW
FreeLibrary
GetCurrentProcess
lstrlenW
ExpandEnvironmentStringsW
GetFileAttributesW
GetVersionExA
QueryPerformanceFrequency
QueryPerformanceCounter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetSystemTimeAsFileTime
SwitchToThread
CreateEventW
SetLastError
GetStringTypeW
WideCharToMultiByte
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
OutputDebugStringW
RtlUnwind
CreateFileW
GetDriveTypeW
GetCurrentDirectoryW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetFullPathNameW
SetStdHandle
FindClose
GetConsoleCP
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
MultiByteToWideChar
GetModuleHandleExW
SetEndOfFile

user32

RegisterClassW
SetWindowPlacement
AdjustWindowRect
GetWindowPlacement
CallNextHookEx
GetIconInfo
IsWindowVisible
SetMenu
UnhookWindowsHookEx
DestroyMenu
ClipCursor
SetWindowsHookExW
GetDC
DestroyWindow
GetMenu
SetWindowLongW
IsZoomed
GetWindowLongW
EnumDisplaySettingsW
SystemParametersInfoA
GetClassLongW
SetRect
SystemParametersInfoW
IsIconic
ReleaseDC
GetWindowTextW
SetWindowPos
CreateWindowExW
GetSystemMetrics
DispatchMessageW
PeekMessageW
TranslateMessage
GetClientRect
DefWindowProcW
MessageBoxW
SendMessageW
ShowWindow
PostQuitMessage
BeginPaint
EndPaint
GetWindow
GetWindowRect
ScreenToClient
InvalidateRect
GetCursorPos
UnregisterClassW
RegisterClassExW
LoadIconW
LoadCursorW
SetCursor
GetMonitorInfoW
LoadStringW

gdi32

GetObjectW
GetStockObject
SelectObject
CreateCompatibleDC
DeleteDC
GetDIBits
DeleteObject

shell32

ShellExecuteW
CommandLineToArgvW
ExtractIconW

ole32

CoCreateGuid
CLSIDFromString
CoCreateInstance
CoInitialize
StringFromGUID2

oleaut32

SysAllocString
SysFreeString

comctl32

ord17

shlwapi

PathFindFileNameW
PathFileExistsW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8dac049854e19f0a1724326fdbb8caba

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9_43

winmm

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 326KB - Virtual size: 326KB

.data Size: 48KB - Virtual size: 60KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 110KB - Virtual size: 110KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 326KB - Virtual size: 326KB

.data
Size: 48KB - Virtual size: 60KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 110KB - Virtual size: 110KB