2025-01-21_04d6830a22f71714baeec3bb406276b7_avoslocker_cobalt-strike_luca-stealer_wapomi

Sharing

Copy URL

Twitter E-mail

General

Target

2025-01-21_04d6830a22f71714baeec3bb406276b7_avoslocker_cobalt-strike_luca-stealer_wapomi
Size

395KB
MD5

04d6830a22f71714baeec3bb406276b7
SHA1

6dc77b029df0c984f323f743817987894ad5e440
SHA256

17941b01a96b55c9c45ba56839cc62ba349a8b44bb5a2d6ee8bd2e6975bb0a8a
SHA512

1e90afd2d7f6c4154b653fa18d00e40a32b5d9e78e65a80903fe66a2dda09d25ef3616384c3ecd7960e35ab9b83d11951ca9336519d4d7064e45bad1534c49eb
SSDEEP

12288:wT9GthZLYM+ZIwjRhY6EidkiKJh44zNmb/uEpApx:wskEirKc4zAb4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-21_04d6830a22f71714baeec3bb406276b7_avoslocker_cobalt-strike_luca-stealer_wapomi

Files

2025-01-21_04d6830a22f71714baeec3bb406276b7_avoslocker_cobalt-strike_luca-stealer_wapomi
.exe windows:6 windows x86 arch:x86

1c132324845e8559f59ade5026c99742

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\murali\1.00.65\QUD\qmi\win\qcwwan\tools\qdcfg\Release\qdcfg.pdb

Imports

kernel32

WriteConsoleW
CreateEventA
GetOverlappedResult
FormatMessageA
LocalFree
GetVersionExA
DeviceIoControl
GetLastError
CloseHandle
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
HeapSize
CreateFileW
DecodePointer

advapi32

RegEnumKeyExA
EnumerateTraceGuids
EnableTrace
ControlTraceA
StartTraceA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�a0�u
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c132324845e8559f59ade5026c99742

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 317KB - Virtual size: 317KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 3KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 10KB - Virtual size: 9KB

�a0�u Size: 16KB - Virtual size: 20KB

.text
Size: 317KB - Virtual size: 317KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 3KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 9KB

�a0�u
Size: 16KB - Virtual size: 20KB