Static task
static1
Behavioral task
behavioral1
Sample
AFUWIN.exe
Resource
win10v2004-20240508-en
General
-
Target
AFUWIN.exe
-
Size
360KB
-
MD5
672f3b50fb16363b1b1289fa301bdb3f
-
SHA1
41a81cf317cd764acb1836ce5c195c7d48f896b0
-
SHA256
2fd6492b953e804353f42ca62deea527135a1696d4400b0fb18b09f9ae09f99e
-
SHA512
387b65140072051e4b17664a75c48062679b468314ef23c68247d5e27fc742574fe44b8540e7b70a19b3970904ca75d470323790a5f93bacc3d0b3a87c9e4e5e
-
SSDEEP
3072:Q6ZDTp3H8ttsvNle4uR4KHm2e4foOIdbfOccub5a77dfWWcqYotFtPyLiqkHX8Sd:/l83sjeq2e4KbWbcWpWOdk5MDRRf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AFUWIN.exe
Files
-
AFUWIN.exe.exe windows:4 windows x86 arch:x86
a5b68e07617a6cfaeab3f2b4ec67f0fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetCommandLineA
RaiseException
ExitThread
HeapSize
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
HeapDestroy
HeapCreate
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
InterlockedExchange
SetEndOfFile
FlushFileBuffers
WritePrivateProfileStringA
FindResourceExA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
lstrcmpA
GetCurrentThread
VirtualProtect
GlobalFree
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FindResourceA
WriteConsoleA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
MultiByteToWideChar
WaitForSingleObject
GetStartupInfoA
CreateThread
LocalFree
SetConsoleCtrlHandler
GetProcessShutdownParameters
SetProcessShutdownParameters
GetEnvironmentVariableA
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetWindowsDirectoryA
SetThreadExecutionState
CreateMutexA
GetProcAddress
GetModuleHandleA
GetConsoleCP
SetConsoleOutputCP
GetCurrentProcess
SetProcessAffinityMask
AllocConsole
GetStdHandle
DeviceIoControl
GetVersionExA
GetCurrentDirectoryA
GetLastError
Sleep
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetFileSize
VirtualFree
CloseHandle
user32
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetCursorPos
ValidateRect
GetActiveWindow
GetAsyncKeyState
MapDialogRect
CreateDialogIndirectParamA
EndDialog
WindowFromPoint
SetCursor
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
LoadIconA
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
GetMenuState
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetSystemMetrics
UnregisterClassA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
DestroyWindow
SendDlgItemMessageA
CreateDialogParamA
MessageBoxA
wsprintfA
LoadStringA
SystemParametersInfoA
BlockInput
ExitWindowsEx
DefWindowProcA
RegisterClassExA
ShowWindow
PeekMessageA
PostQuitMessage
PostMessageA
KillTimer
SetTimer
UpdateWindow
ScreenToClient
ChildWindowFromPoint
GetWindowRect
SendMessageA
MessageBeep
EnableWindow
InvalidateRect
InflateRect
IsRectEmpty
GetClientRect
GetSysColor
CreateWindowExA
ModifyMenuA
SetMenuItemBitmaps
GetCapture
CheckMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetClassLongA
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
SetViewportOrgEx
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
EnumFontFamiliesExA
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
Rectangle
CreatePen
CreateSolidBrush
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
OpenSCManagerA
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
shell32
ShellExecuteA
comctl32
PropertySheetA
DestroyPropertySheetPage
ord17
CreatePropertySheetPageA
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ