General

Malware Config

Signatures

Files

• 2024-06-15_329a36f52485ea098ab3432ecbb1952d_avoslocker

  .exe windows:6 windows x86 arch:x86

  a269b978974b3c7c1d72f089d95c3ce3

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  D:\MyStuff\_GARMIN\_export\HMs_DIYDesigner.pdb

  Imports

  kernel32

  GetTimeZoneInformation

  ExitProcess

  GetStdHandle

  VirtualQuery

  VirtualAlloc

  GetSystemInfo

  HeapQueryInformation

  GetFileType

  SetStdHandle

  GetTimeFormatW

  GetModuleHandleExW

  FreeLibraryAndExitThread

  ExitThread

  CreateThread

  QueryPerformanceFrequency

  RtlUnwind

  OutputDebugStringW

  GetDateFormatW

  LCMapStringW

  SetFilePointerEx

  GetConsoleMode

  ReadConsoleW

  GetConsoleCP

  FindFirstFileExW

  FindNextFileW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  GetStringTypeW

  GetStartupInfoW

  IsDebuggerPresent

  InitializeSListHead

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  IsProcessorFeaturePresent

  TerminateProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  WaitForSingleObjectEx

  ResetEvent

  GetTempFileNameW

  GetWindowsDirectoryW

  SetErrorMode

  SearchPathW

  GetProfileIntW

  Sleep

  GetTempPathW

  FindResourceExW

  SystemTimeToTzSpecificLocalTime

  GetFileTime

  GetFileSizeEx

  GetFileAttributesExW

  FileTimeToLocalFileTime

  lstrcmpiW

  GetCurrentProcess

  DuplicateHandle

  WriteFile

  UnlockFile

  SetFilePointer

  SetEndOfFile

  ReadFile

  LockFile

  GetVolumeInformationW

  GetFullPathNameW

  FlushFileBuffers

  FindFirstFileW

  FindClose

  DeleteFileW

  GetCurrentDirectoryW

  GetFileSize

  GetFileAttributesW

  CreateFileW

  VerifyVersionInfoW

  VerSetConditionMask

  FileTimeToSystemTime

  VirtualProtect

  GlobalFlags

  GetUserDefaultUILanguage

  GetSystemDefaultUILanguage

  GetLocaleInfoW

  LocalReAlloc

  LocalAlloc

  GlobalHandle

  GlobalReAlloc

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalGetAtomNameW

  InitializeCriticalSectionAndSpinCount

  lstrcpyW

  WritePrivateProfileStringW

  GetPrivateProfileStringW

  GetPrivateProfileIntW

  lstrcmpA

  GetVersionExW

  GetCurrentThread

  ResumeThread

  SetThreadPriority

  CreateEventW

  WaitForSingleObject

  SetEvent

  CloseHandle

  GetCurrentProcessId

  CopyFileW

  FormatMessageW

  MulDiv

  LocalFree

  GlobalSize

  CompareStringW

  GlobalFindAtomW

  GlobalAddAtomW

  lstrcmpW

  GlobalDeleteAtom

  LoadLibraryW

  LoadLibraryA

  LoadLibraryExW

  GetProcAddress

  GetModuleHandleA

  FreeLibrary

  GetSystemDirectoryW

  GetCurrentThreadId

  SetLastError

  HeapFree

  EncodePointer

  OutputDebugStringA

  GlobalUnlock

  GetTickCount

  WideCharToMultiByte

  GetModuleHandleW

  GlobalLock

  GlobalFree

  GlobalAlloc

  MultiByteToWideChar

  GetModuleFileNameW

  GetCommandLineW

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  GetProcessHeap

  DeleteCriticalSection

  DecodePointer

  HeapAlloc

  RaiseException

  HeapReAlloc

  GetLastError

  HeapSize

  InitializeCriticalSectionEx

  LeaveCriticalSection

  EnterCriticalSection

  GetCommandLineA

  WriteConsoleW

  gdi32

  CreateHatchBrush

  CreatePen

  CreatePatternBrush

  CreateRectRgn

  CreateSolidBrush

  Escape

  ExcludeClipRect

  GetClipBox

  GetObjectType

  GetPixel

  GetStockObject

  GetViewportExtEx

  IntersectClipRect

  LineTo

  PtVisible

  RectVisible

  RestoreDC

  SaveDC

  SelectClipRgn

  ExtSelectClipRgn

  SelectPalette

  SetBkMode

  SetMapMode

  SetLayout

  GetLayout

  SetPolyFillMode

  SetROP2

  SetTextAlign

  MoveToEx

  TextOutW

  ExtTextOutW

  SetViewportExtEx

  SetViewportOrgEx

  SetWindowExtEx

  SetWindowOrgEx

  OffsetViewportOrgEx

  OffsetWindowOrgEx

  ScaleViewportExtEx

  ScaleWindowExtEx

  CreateEllipticRgn

  CreateRectRgnIndirect

  Ellipse

  GetBkColor

  GetTextColor

  GetTextExtentPoint32W

  PatBlt

  CreatePolygonRgn

  Polygon

  Polyline

  GetTextMetricsW

  SetRectRgn

  DPtoLP

  CreateDIBitmap

  EnumFontFamiliesW

  GetTextCharsetInfo

  RealizePalette

  SetPixel

  StretchBlt

  CreateDIBSection

  SetDIBColorTable

  CreateRoundRectRgn

  Rectangle

  GetRgnBox

  OffsetRgn

  RoundRect

  CreatePalette

  GetPaletteEntries

  EnumFontFamiliesExW

  GetNearestPaletteIndex

  GetSystemPaletteEntries

  LPtoDP

  ExtFloodFill

  SetPaletteEntries

  FillRgn

  FrameRgn

  GetBoundsRect

  PtInRegion

  GetViewportOrgEx

  GetWindowOrgEx

  SetPixelV

  GetTextFaceW

  GetDeviceCaps

  CreateDCW

  CopyMetaFileW

  CreateBitmap

  GetObjectW

  SetTextColor

  SetBkColor

  BitBlt

  CreateCompatibleBitmap

  SelectObject

  CreateCompatibleDC

  DeleteObject

  CreateFontIndirectW

  CombineRgn

  GetWindowExtEx

  DeleteDC

  shell32

  SHGetMalloc

  SHGetPathFromIDListW

  SHGetSpecialFolderLocation

  SHBrowseForFolderW

  SHGetDesktopFolder

  SHAppBarMessage

  DragFinish

  DragQueryFileW

  ShellExecuteW

  SHGetFileInfoW

  CommandLineToArgvW

  ole32

  RevokeDragDrop

  OleLockRunning

  OleCreateMenuDescriptor

  OleDestroyMenuDescriptor

  OleTranslateAccelerator

  IsAccelerator

  RegisterDragDrop

  CoLockObjectExternal

  OleGetClipboard

  DoDragDrop

  CoDisconnectObject

  CoInitializeEx

  CoInitialize

  CoCreateInstance

  CoCreateGuid

  CoUninitialize

  ReleaseStgMedium

  OleDuplicateData

  CoTaskMemFree

  CoTaskMemAlloc

  CreateStreamOnHGlobal

  oleaut32

  SysStringLen

  SystemTimeToVariantTime

  VariantTimeToSystemTime

  VariantChangeType

  VariantCopy

  VarBstrFromDate

  LoadTypeLi

  VariantClear

  SysAllocString

  SysFreeString

  VariantInit

  SysAllocStringLen

  Sections

  .text

  Size: 1.9MB - Virtual size: 1.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 431KB - Virtual size: 432KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 22KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 21.7MB - Virtual size: 21.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ