2024-10-10_430f670593be82ec7276bc1f3c9197fd_avoslocker | Triage

Sharing

General

Target

2024-10-10_430f670593be82ec7276bc1f3c9197fd_avoslocker
Size

7.4MB
MD5

430f670593be82ec7276bc1f3c9197fd
SHA1

aac1362c35cb0dee89aef7cbaaee3b8082661e4f
SHA256

ac6c5c8e3fc048df1885259e79e600087a1e04f549079f3f2f738ad2d550228a
SHA512

cd0c973ffada6aa9bb42f779a6a75aafe5dedef34d66595c9b88f5e86f0536c2e67c9a45d15e2f8360c0dca14c262467cbe4b6ad81257e01b72a3ddda015cd73
SSDEEP

98304:B/o+sqRtdd8LtT0On9mp0+IAsZYNnuWx94FGoLab0A3:q+sqRtML9rn9mStmnadLjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-10_430f670593be82ec7276bc1f3c9197fd_avoslocker

Files

2024-10-10_430f670593be82ec7276bc1f3c9197fd_avoslocker
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ