2024-10-09_504a10ca14e99789e0c9d58881c969cd_avoslocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_504a10ca14e99789e0c9d58881c969cd_avoslocker
Size

7.7MB
MD5

504a10ca14e99789e0c9d58881c969cd
SHA1

b625b4ad002acc519c4728658fe28af08231198f
SHA256

76380881925207e3174041671df788d497888bdba1331fcfd456b7b010790089
SHA512

50d9b0a26d48e7a8f723c887a0e96ca006eacb56fd98402a7facee96d5dd18f80a958d9952275429b3a91965984858bfa36005ae20c843fd0dc3cdc0c8acc510
SSDEEP

98304:dU+P+ju3cdq8hDYNkDWxiChmiGc5gg3pEjeNwmZWrTlbioe00HcM5n:q+2i3cdq89YNkD8XEDg5EjeNATQoeP5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_504a10ca14e99789e0c9d58881c969cd_avoslocker

Files

2024-10-09_504a10ca14e99789e0c9d58881c969cd_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 887KB - Virtual size: 887KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ