Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-14_9c245aa26069cd2f0f0ede1517d784f9_avoslocker_metamorfo.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-10-14_9c245aa26069cd2f0f0ede1517d784f9_avoslocker_metamorfo.exe
Resource
win10v2004-20241007-en
Target
2024-10-14_9c245aa26069cd2f0f0ede1517d784f9_avoslocker_metamorfo
Size
47.4MB
MD5
9c245aa26069cd2f0f0ede1517d784f9
SHA1
1fa0a354b04bd5f7ff434a60e0c9d6d619df6dfb
SHA256
2c3830e343b43223e0a8a61b8c29269f11708595916b97b2c7b726f2d265c252
SHA512
eb8d091f8bcbe3fa01c524b8e8671393647542c4b23f301e4d080f01993d9d2d2b0f384f481dcd88b9eecdab85c54ad938b0599c1232cb18627466d11357e6d8
SSDEEP
786432:NAtGzntNtv469VX22VZaQ//MFFpRQMgwGBghbAssKjNruHhMs96Aeu0DXrZJf8Kd:GtGzntNtn9VX22VZ5EFF7QMgwbbAJKjX
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\JA\workspace\tv_publicrelease-windows\build_cmake_win\QS\Release\TeamViewer.pdb
RaiseException
DeleteCriticalSection
GetLastError
InitializeCriticalSectionEx
WaitForMultipleObjects
WaitForSingleObject
PostQueuedCompletionStatus
FormatMessageW
SetEvent
TerminateThread
TlsAlloc
CloseHandle
QueueUserAPC
DecodePointer
LocalFree
WideCharToMultiByte
TlsFree
FormatMessageA
CreateEventA
WaitForSingleObjectEx
GetTickCount
Sleep
GetUserDefaultLCID
GetStringTypeExW
LCMapStringW
LoadLibraryA
FreeLibrary
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetProcessHeap
GetCurrentProcess
TlsGetValue
GetPrivateProfileStringW
WritePrivateProfileStringW
GetSystemTimeAsFileTime
MulDiv
SetWaitableTimer
GetQueuedCompletionStatus
TlsSetValue
SleepEx
CreateEventW
CreateIoCompletionPort
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoW
VerSetConditionMask
CreateWaitableTimerW
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetCommandLineW
ExpandEnvironmentStringsW
SetErrorMode
SetProcessShutdownParameters
GetModuleFileNameW
CreateMutexW
ReleaseMutex
GetCurrentProcessId
MoveFileExW
GetTempPathW
CreateDirectoryW
GetUserGeoID
GetGeoInfoW
GetLocaleInfoW
GlobalMemoryStatusEx
GetComputerNameW
DeleteFileW
MoveFileW
GetStringTypeExA
LCMapStringA
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
SetFilePointer
GetFileInformationByHandle
GetFileSize
ReadFile
CreateFileW
CreateFileMappingW
MapViewOfFile
WriteFile
UnmapViewOfFile
LocalAlloc
GetFileAttributesW
GetCurrentDirectoryW
MultiByteToWideChar
LocalFileTimeToFileTime
SetFileTime
GetTempFileNameW
GetProcAddress
ProcessIdToSessionId
SetFilePointerEx
OpenMutexW
DuplicateHandle
CreateSemaphoreA
ReleaseSemaphore
GetNativeSystemInfo
GetSystemPowerStatus
GetModuleHandleW
lstrcmpiW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
OpenEventW
GetProcessId
SetFileAttributesW
InitializeCriticalSection
LockResource
FindResourceExW
QueryPerformanceCounter
QueryPerformanceFrequency
lstrlenW
GlobalReAlloc
GetTimeFormatW
CopyFileW
K32EnumProcessModules
K32GetModuleFileNameExW
GetSystemFirmwareTable
CancelIoEx
DeviceIoControl
SetThreadPriority
GetCurrentThread
GetOverlappedResult
CompareStringW
CompareFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemDefaultLangID
GetDateFormatW
GetExitCodeProcess
GetSystemInfo
GlobalHandle
lstrcmpW
OutputDebugStringW
LoadLibraryW
GetCurrentThreadId
UnregisterWaitEx
RegisterWaitForSingleObject
FindFirstFileW
FindClose
FindNextFileW
CreateThread
ResumeThread
GetPriorityClass
SetPriorityClass
GetExitCodeThread
DebugBreak
ResetEvent
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetVersionExW
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
FlushViewOfFile
CreateFileA
GetVersionExA
DeleteFileA
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetSystemTime
FlushFileBuffers
OpenEventA
CreateSemaphoreW
WakeConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
WakeAllConditionVariable
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
SetUnhandledExceptionFilter
CreateProcessW
GetSystemDirectoryW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessTimes
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetNumberFormatW
GetCurrencyFormatW
GetSystemDefaultLCID
GetTempFileNameA
GetCPInfo
LocalSize
SetHandleInformation
SetFileCompletionNotificationModes
CancelIo
SwitchToThread
UnregisterWait
SetConsoleCtrlHandler
GetFileType
GetConsoleMode
ConnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetNamedPipeHandleStateW
CancelSynchronousIo
QueueUserWorkItem
CreateNamedPipeA
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
ReadConsoleW
WriteConsoleW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
WriteConsoleInputW
TerminateProcess
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
GetFileSizeEx
GetFinalPathNameByHandleW
RemoveDirectoryW
ReOpenFile
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetLongPathNameW
GetShortPathNameW
ReadDirectoryChangesW
GetStdHandle
GetStartupInfoW
ExitProcess
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetEnvironmentVariableA
OpenFileMappingA
MapViewOfFileEx
WTSGetActiveConsoleSessionId
K32GetModuleBaseNameW
QueryFullProcessImageNameW
K32EnumProcesses
IsWow64Process
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
GetLogicalProcessorInformationEx
SetSearchPathMode
SetDllDirectoryW
HeapSetInformation
SetProcessDEPPolicy
GetTickCount64
GetDynamicTimeZoneInformation
GetThreadTimes
GetSystemTimes
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableW
LoadLibraryExA
VirtualProtect
VirtualQuery
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
EncodePointer
LCMapStringEx
CompareStringEx
GetLocaleInfoEx
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
IsDebuggerPresent
GetFileTime
GetWindowsDirectoryW
CreateDirectoryExW
CopyFileExW
WaitForMultipleObjectsEx
CreateWaitableTimerA
UnhandledExceptionFilter
RtlUnwind
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetStdHandle
GetConsoleOutputCP
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
FindFirstFileExW
GetCommandLineA
SetThreadExecutionState
ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmSetCandidateWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ