Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_19486a5b776a085da9ccd18fcc0506c4_avoslocker_hijackloader.exe
Resource
win7-20240708-en
General
-
Target
2024-09-30_19486a5b776a085da9ccd18fcc0506c4_avoslocker_hijackloader
-
Size
3.4MB
-
MD5
19486a5b776a085da9ccd18fcc0506c4
-
SHA1
633470a2cf55f36f2cee6b7de39df7d0d5cc4ec1
-
SHA256
5b54672d09edcee5e071f732e90a63a14722ecd1ce64df012857004eb8083c5c
-
SHA512
d3197aaaebaa6a8d84fcbda25fe97cb7a87d9a3c5c5fd9fcc30586bfa21c23707d6694ab88a66fa1d5178fd5f1639e6b6926daa8bd3c9707d19d175b5ed09403
-
SSDEEP
98304:UCLJ2S3yCu768QOU/jIEeQfoR/IuOFVjUu5:Bd3S6tFIF0wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-30_19486a5b776a085da9ccd18fcc0506c4_avoslocker_hijackloader
Files
-
2024-09-30_19486a5b776a085da9ccd18fcc0506c4_avoslocker_hijackloader.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ