socelars | 2025-01-07_fde618248cf903e0c7904dc140ada26e_avoslocker_luca-stealer | Triage

Sharing

General

Target

2025-01-07_fde618248cf903e0c7904dc140ada26e_avoslocker_luca-stealer
Size

1.4MB
MD5

fde618248cf903e0c7904dc140ada26e
SHA1

e2d61fa23b0a2470f0ad56f293c046e70accee86
SHA256

88fc01fd1348d9917d321c0c8732fe0e9c86786d38dcb007544759c5351aee3c
SHA512

57d5aba029992abf2f48b0262bece32ab504f87d1f3db7bb6a9da2ad67e201a197d07722c4c4ee9de75b063b2e1a96a8eee2d8dc29deac11372f45f1ae03e58f
SSDEEP

24576:CJSLpwfVWRh0SGQ48Lm2194mKa4qrNkW9NTPjutwqBcn:Cup62ESMyjTPjuqqa

Score

10^/10

socelars

Malware Config

Signatures

Socelars family
socelars

Socelars payload 1 IoCs

resource	yara_rule
sample	family_socelars

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-07_fde618248cf903e0c7904dc140ada26e_avoslocker_luca-stealer

Files

2025-01-07_fde618248cf903e0c7904dc140ada26e_avoslocker_luca-stealer
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eyjtoiq
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eyjtoiq
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ