Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-01_fc5f9ca763777782328a8ad0e6da544e_avoslocker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-10-01_fc5f9ca763777782328a8ad0e6da544e_avoslocker.exe
Resource
win10v2004-20240802-en
Target
2024-10-01_fc5f9ca763777782328a8ad0e6da544e_avoslocker
Size
39.6MB
MD5
fc5f9ca763777782328a8ad0e6da544e
SHA1
f6b2ab15dffeaa3792f5343de10a2810a0354d3b
SHA256
943789a309725c9535c472781693485c31c5ae0d7a644403fd851d095c23479b
SHA512
758b06a5e646696be70d443a54f5c2c4c6a0badda07426283dec2214540846b3884414b8a8908883c28e846feb99b6ec52e88f44928de4c9110d65b7c8a27c43
SSDEEP
786432:JhtGznte/Cc3pn8s7Oim1pnwkO/NdRWAStpNgv8MxBpo23ANTOi3SNIAnFulgV:XtGzntqCc3pn8s7rm1pwkO/LRWAStpNW
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\JA\workspace\tv_publicrelease-windows\build_cmake_win\HOST\Release\TeamViewer.pdb
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
DeleteCriticalSection
RaiseException
GetLastError
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
CloseHandle
SetLastError
GetCurrentThreadId
ResetEvent
OpenEventA
GetCurrentProcessId
SetEvent
CreateEventA
WaitForSingleObjectEx
HeapFree
HeapSize
PostQueuedCompletionStatus
FormatMessageW
TlsAlloc
HeapReAlloc
HeapAlloc
DecodePointer
HeapDestroy
LocalFree
GetProcessHeap
WideCharToMultiByte
TlsFree
FormatMessageA
Sleep
TlsGetValue
UnregisterWaitEx
RegisterWaitForSingleObject
UnregisterWait
GlobalFree
GetSystemTimeAsFileTime
SetWaitableTimer
GetQueuedCompletionStatus
TlsSetValue
WaitForSingleObject
SleepEx
CreateEventW
CreateIoCompletionPort
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoW
VerSetConditionMask
QueueUserAPC
TerminateThread
WaitForMultipleObjects
CreateWaitableTimerW
GetTickCount
GetCurrentProcess
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCommandLineW
ExpandEnvironmentStringsW
SetErrorMode
SetProcessShutdownParameters
CreateMutexW
ReleaseMutex
InitializeCriticalSection
MoveFileExW
GetTempPathW
CreateDirectoryW
GetUserGeoID
GetGeoInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
GetLogicalProcessorInformation
GetSystemInfo
GlobalMemoryStatusEx
GetComputerNameW
DeleteFileW
MoveFileW
LocalAlloc
SetFilePointer
SystemTimeToFileTime
GetFileAttributesW
CreateFileW
ReadFile
GetCurrentDirectoryW
MultiByteToWideChar
LocalFileTimeToFileTime
WriteFile
SetFileTime
FileTimeToSystemTime
GetLocalTime
GetFileInformationByHandle
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetTempFileNameW
ReleaseSemaphore
DuplicateHandle
CreateSemaphoreA
GetNativeSystemInfo
GetSystemPowerStatus
GetModuleHandleW
FreeLibrary
GetProcAddress
lstrcmpiW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
OpenEventW
GetProcessId
ProcessIdToSessionId
LockResource
FindResourceExW
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
QueryPerformanceCounter
QueryPerformanceFrequency
lstrlenW
GlobalReAlloc
GetTimeFormatW
MulDiv
CopyFileW
CreateThread
GetCurrentThread
CompareStringW
CompareFileTime
FindFirstFileW
FindClose
GetVolumeInformationW
DeviceIoControl
SetThreadPriority
GetOverlappedResult
K32EnumProcessModules
K32GetModuleFileNameExW
GetSystemFirmwareTable
OpenMutexW
CreateFileMappingA
OpenFileMappingA
SwitchToThread
MapViewOfFileEx
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemDefaultLangID
GetDateFormatW
GlobalHandle
lstrcmpW
FindNextFileW
ResumeThread
GetPriorityClass
SetPriorityClass
GetExitCodeThread
DebugBreak
GetDriveTypeW
GetFullPathNameW
GetExitCodeProcess
WakeConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
CreateSemaphoreW
TryEnterCriticalSection
WakeAllConditionVariable
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
AreFileApisANSI
HeapCreate
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetVersionExW
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
GetVersionExA
DeleteFileA
LoadLibraryW
HeapCompact
UnlockFile
LockFileEx
GetSystemTime
FlushFileBuffers
OpenThread
GetComputerNameExA
GetComputerNameExW
SetFileAttributesW
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetFileSizeEx
GetTickCount64
IsWow64Process
OpenProcess
WaitNamedPipeW
CreateProcessW
TerminateProcess
K32GetModuleBaseNameW
QueryFullProcessImageNameW
K32EnumProcesses
WTSGetActiveConsoleSessionId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetDynamicTimeZoneInformation
GetTimeZoneInformation
GetSystemTimes
GetProcessTimes
SetFilePointerEx
GetThreadTimes
SetUnhandledExceptionFilter
SetSearchPathMode
SetDllDirectoryW
HeapSetInformation
SetProcessDEPPolicy
VirtualProtect
VirtualQuery
GetStringTypeW
EncodePointer
GetCPInfo
LCMapStringW
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
GetStringTypeExW
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
GetEnvironmentVariableW
GetFileTime
RemoveDirectoryW
GetWindowsDirectoryW
CreateDirectoryExW
WaitForMultipleObjectsEx
CreateWaitableTimerA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
UnhandledExceptionFilter
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
FreeLibraryAndExitThread
InterlockedFlushSList
QueryDepthSList
RtlUnwind
ExitThread
GetModuleHandleExW
ExitProcess
GetFileType
PeekNamedPipe
SetEnvironmentVariableW
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetStdHandle
IsValidLocale
EnumSystemLocalesW
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindFirstFileExW
GetCommandLineA
WriteConsoleW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ