Behavioral task
behavioral1
Sample
2025-02-14_77890bcd6ffe5d020139d4aa280666f2_avoslocker_luca-stealer_qakbot.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-02-14_77890bcd6ffe5d020139d4aa280666f2_avoslocker_luca-stealer_qakbot.exe
Resource
win10v2004-20250211-en
General
-
Target
2025-02-14_77890bcd6ffe5d020139d4aa280666f2_avoslocker_luca-stealer_qakbot
-
Size
5.9MB
-
MD5
77890bcd6ffe5d020139d4aa280666f2
-
SHA1
0526f25670e26ad093df2ed7e17f29c896193d42
-
SHA256
b1455e0bfd077468a669d8bed9e0cb78e03d8d641640f0242d53dda1caee6a71
-
SHA512
f395f60d7dfdfd44f19ba23df09612ae4de066abe3e9ec855e5df82a003b5a0c0272c3b549c1eac8733067b68c14ac329a5e2c4a2a6f96dcf1548de239b272da
-
SSDEEP
6144:qnds35YSsDOUJtXkTH7q/SqLhkxc65arR6GQLhoHqqDEbB8B:qdspYS8U7q/SqLhkl5IIq3B
Malware Config
Signatures
Files
-
2025-02-14_77890bcd6ffe5d020139d4aa280666f2_avoslocker_luca-stealer_qakbot.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ