Static task
static1
Behavioral task
behavioral1
Sample
2025-02-19_609aa444e275197568336bbb4f690caf_avoslocker_hijackloader_luca-stealer.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-02-19_609aa444e275197568336bbb4f690caf_avoslocker_hijackloader_luca-stealer.exe
Resource
win10v2004-20250217-en
General
-
Target
2025-02-19_609aa444e275197568336bbb4f690caf_avoslocker_hijackloader_luca-stealer
-
Size
3.6MB
-
MD5
609aa444e275197568336bbb4f690caf
-
SHA1
c7b17dc65916e9c0d1a821f37cc09d7874806aaf
-
SHA256
45007a1ad8e1290288e20c88b836ea1e9d2b55d90f08ea14850bb456fceb113b
-
SHA512
b01954515201153924c6ae852bd0397de8f02ef33cdd977f8762712bdd4296d520b9238bc27d2176dd85928db1a0d57f8e4c4551f61f2caa9d3202166730b60f
-
SSDEEP
98304:eZNVWg4AxEfkzA8OU/jIEeQfoR/IuOFVjUu5h:8Nsg4AMgA8FIF0wub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-19_609aa444e275197568336bbb4f690caf_avoslocker_hijackloader_luca-stealer
Files
-
2025-02-19_609aa444e275197568336bbb4f690caf_avoslocker_hijackloader_luca-stealer.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ