D:\code\svn\VS_pro\InfraRedTouch\主线版本\投影白板校准\IR_Sotf_new_old\Release\InfraRedTouch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-12_55e99a528367c63a08958ab642b4fe0e_avoslocker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-10-12_55e99a528367c63a08958ab642b4fe0e_avoslocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-12_55e99a528367c63a08958ab642b4fe0e_avoslocker
-
Size
6.6MB
-
MD5
55e99a528367c63a08958ab642b4fe0e
-
SHA1
d55c71c2e6877d3298da9f0868c050e35807eb85
-
SHA256
e5fdfee3dd076ddf8c8b35b47d7431111de5c6feafa9c17c868029146030351b
-
SHA512
e6c2481f2d62af59c1bdca13349d552374dc6ba4954414b5e79e6775d6662ab622806f661a5ecf3bba934b9abdf7cbf809dd367e697c16ff0bfec53c5c2424bb
-
SSDEEP
98304:Q2Mxkd9Y1c8Rfuz19OwZ6VeyfQaT6yZXQ2yWaIuARt:ejui9oaT6yZXQ3q7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-12_55e99a528367c63a08958ab642b4fe0e_avoslocker
Files
-
2024-10-12_55e99a528367c63a08958ab642b4fe0e_avoslocker.exe windows:6 windows x86 arch:x86
54f992f9842e84ba429064f8a36646f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
GetDriveTypeW
CreateThread
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
LCMapStringW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
GetTimeZoneInformation
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTempFileNameW
GetProfileIntW
GetTickCount
SearchPathW
GetTempPathW
FindResourceExW
GetWindowsDirectoryW
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetCurrentThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FileTimeToLocalFileTime
GetVersionExW
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetCurrentProcessId
CopyFileW
FormatMessageW
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetThreadLocale
lstrcmpiW
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
SetLastError
DuplicateHandle
OutputDebugStringA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
Sleep
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
WritePrivateProfileStringW
GetPrivateProfileStringW
LocalFree
GetCommandLineW
GetUserDefaultUILanguage
TerminateProcess
K32GetModuleFileNameExW
OpenProcess
GetCurrentProcess
CloseHandle
CreateSemaphoreW
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
Beep
OutputDebugStringW
FindResourceW
LoadResource
LockResource
SizeofResource
ExitThread
WriteConsoleW
user32
EnumDisplayMonitors
SetLayeredWindowAttributes
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
WaitMessage
IntersectRect
InflateRect
MapVirtualKeyW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
LoadMenuW
GetCursorPos
DrawStateW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
TrackMouseEvent
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
ToUnicodeEx
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetSysColor
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
MessageBoxW
GetSystemMetrics
KillTimer
ShowCursor
SetTimer
GrayStringW
DrawTextExW
DrawTextW
GetParent
GetWindowLongW
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
IsZoomed
SetCapture
ReleaseCapture
DeleteMenu
SetWindowRgn
MessageBeep
WindowFromPoint
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetMenuStringW
CharUpperW
MonitorFromPoint
DestroyIcon
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawFocusRect
SetScrollPos
GetDC
ReleaseDC
GetWindowRect
LoadBitmapW
EnumDisplayDevicesW
EnumDisplaySettingsW
EnableWindow
SendMessageW
ScreenToClient
DefWindowProcW
SetRect
GetClientRect
BringWindowToTop
LoadImageW
GetKeyNameTextW
FillRect
ClientToScreen
GetWindow
GetDesktopWindow
IsWindow
GetPropW
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
FindWindowW
GetWindowThreadProcessId
LoadIconW
RegisterDeviceNotificationW
GetSystemMenu
AppendMenuW
CreateAcceleratorTableW
DestroyAcceleratorTable
SetCursorPos
SetParent
DrawIcon
InvalidateRect
SetPropW
RemovePropW
UnregisterClassW
DrawIconEx
GetWindowRgn
GetComboBoxInfo
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
InvertRect
HideCaret
GetIconInfo
PostThreadMessageW
FrameRect
CopyIcon
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
ModifyMenuW
CharUpperBuffW
RegisterClipboardFormatW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongW
LockWindowUpdate
DeferWindowPos
gdi32
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateHatchBrush
PatBlt
CombineRgn
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreateEllipticRgn
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
SetDIBColorTable
OffsetRgn
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
CreateDCW
CopyMetaFileW
GetDeviceCaps
ExtCreatePen
Rectangle
CreatePen
CreateFontW
CreateCompatibleBitmap
DeleteObject
SetBoundsRect
DeleteDC
CreateBitmap
GetObjectW
CreateCompatibleDC
BitBlt
StretchBlt
Ellipse
GetStockObject
CreateRectRgnIndirect
LineTo
SelectObject
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegCreateKeyExW
LookupPrivilegeValueW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
AdjustTokenPrivileges
shell32
CommandLineToArgvW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
StrCmpW
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW
PathIsUNCW
uxtheme
GetThemePartSize
IsAppThemed
GetWindowTheme
DrawThemeBackground
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeSysColor
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
ole32
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
oleaut32
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
SysAllocString
VariantChangeType
VariantClear
SysAllocStringLen
VariantInit
SysFreeString
oledlg
OleUIBusyW
ws2_32
sendto
send
select
recvfrom
recv
ntohs
inet_ntoa
inet_addr
htons
htonl
connect
WSAStartup
closesocket
bind
accept
gethostbyname
socket
WSACleanup
WSASetLastError
WSAGetLastError
WSAAsyncSelect
gdiplus
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipDeleteGraphics
GdipCreateBitmapFromStream
multitouch_hw_port
HC_OLD_Fct_GetCalibrateParam
HC_GetDevID
HC_GetExtCmd
HC_Fct_SetHotKeyBar
ord109
ord106
HC_SetTouchSta
HC_Iap
HC_GetDevType
HC_GetIapSta
HC_GetDevSubscriptList
ord2
HC_OLD_SetControlParam
ord3
HC_OLD_GetScreenParam
HC_IsNewVersion
HC_GetStore
HC_SetStore
HC_Fct_GetDebugInfo
HC_OLD_SetTouchCalibrate
HC_OLD_GetTouchReport
HC_GetTouchReport
ord105
HC_Fct_GetHotKeyBar
HC_SetControlParam
HC_GetControlParam
HC_GetScreenParam
HC_Fct_GetCalibrateParam
HC_OLD_GetControlParam
HC_SetTouchCalibrate
ord1
imm32
ImmGetContext
ImmAssociateContext
ImmReleaseContext
ImmGetOpenStatus
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
winmm
PlaySoundW
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ