VuDH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-19_8d832c37b858dc1a58a07208d1aeabe9_avoslocker_formbook_hijackloader_luca-stealer.exe
Resource
win7-20240903-en
General
-
Target
2024-11-19_8d832c37b858dc1a58a07208d1aeabe9_avoslocker_formbook_hijackloader_luca-stealer
-
Size
7.1MB
-
MD5
8d832c37b858dc1a58a07208d1aeabe9
-
SHA1
ba99065bcf06ca0a982e378074c0588606e2a598
-
SHA256
b120a5a4ec9d40696f7823fbf1044b4c4a6e2793ba336917bd9246a6beea9385
-
SHA512
17b3e6f4623463c15962811cd57f61ccf9ef56bff91114fbfeda9aba2d36c60eedf4605ca6f2c6590fe027736d5d61d26b1afeeaf0c42997810a1ef81716029c
-
SSDEEP
196608:lR668aaELKR668aaEL4R668aaELeFIF0wu:lp8aa7p8aaZp8aap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-11-19_8d832c37b858dc1a58a07208d1aeabe9_avoslocker_formbook_hijackloader_luca-stealer
Files
-
2024-11-19_8d832c37b858dc1a58a07208d1aeabe9_avoslocker_formbook_hijackloader_luca-stealer.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ