d:\Apple][\AppleWin\svn\trunk\AppleWin\Release\Applewin.pdb
Static task
static1
General
-
Target
Applewin.exe
-
Size
1.5MB
-
MD5
652220ea513d036e7585e68e8f689504
-
SHA1
8f36749ebced85bcd5300194516deb06445927ad
-
SHA256
b6bc32af4424ac385fd9d2fd9a87c2c2cb871ff98d5e6a13b1b2823a182a0e13
-
SHA512
691a0937a41094cb0dcb3abbbb7d906ca51cc6091992895c87b6866c97cdaa48bc05b505edcb729dbd90983589f793bebd9c8d3c55071c08a82d6a02b3463624
-
SSDEEP
24576:xMZFn7fEharr6KetakSA+I/rE4OEB+oCGHZcKMj/cn14x+/R9:QnIarFQhF+IzHOiCGHZz4xIR9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Applewin.exe
Files
-
Applewin.exe.exe windows:4 windows x86 arch:x86
72f4960d20d2154f916e582494198fb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
PropertySheetA
ord17
ddraw
DirectDrawCreate
winmm
joyGetDevCapsA
joyGetPos
dsound
ord2
ord1
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
dinput8
DirectInput8Create
ws2_32
send
WSAStartup
socket
htons
htonl
bind
listen
recv
WSAAsyncSelect
WSACleanup
shutdown
closesocket
accept
kernel32
LoadResource
SizeofResource
FindResourceA
VirtualFree
ReadFile
SetFilePointer
WriteFile
DeleteFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GlobalUnlock
GlobalLock
GlobalDeleteAtom
GlobalAddAtomA
OutputDebugStringA
ExitProcess
WaitForMultipleObjects
CreateThread
CreateEventA
GetExitCodeThread
SetEvent
GetModuleHandleA
GetLastError
SetCommState
GetCommState
ClearCommError
WaitCommEvent
SetCommMask
SetCommTimeouts
CreateSemaphoreA
WaitForSingleObject
Beep
FreeLibrary
GetProcAddress
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LockResource
FreeEnvironmentStringsA
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetCurrentDirectoryA
GetFullPathNameA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetFileType
SetHandleCount
InterlockedExchange
SetConsoleCtrlHandler
FatalAppExitA
GetStdHandle
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
RtlUnwind
RaiseException
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetDateFormatA
GetTimeFormatA
SetEnvironmentVariableA
CreateFileA
GetFileSize
CloseHandle
GetFileAttributesA
SetCurrentDirectoryA
GetModuleFileNameA
Sleep
GetTickCount
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetExitCodeProcess
CreateProcessA
SetEndOfFile
CompareStringA
CompareStringW
GetEnvironmentStrings
user32
EndDialog
GetDlgItemTextA
SetWindowTextA
CheckRadioButton
GetParent
CheckDlgButton
SendDlgItemMessageA
IsDlgButtonChecked
EnableWindow
GetDlgItem
DialogBoxParamA
GetKeyState
DefWindowProcA
ShowWindow
MoveWindow
GetDesktopWindow
VkKeyScanA
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
LoadIconA
SetFocus
LoadBitmapA
GetWindowTextA
MapWindowPoints
SetTimer
GetSystemMetrics
GetWindowRect
TranslateMessage
DispatchMessageA
RegisterClassExA
PostQuitMessage
GetUpdateRect
IsIconic
PtInRect
SetForegroundWindow
GetClientRect
UpdateWindow
LoadCursorA
SetCursor
LoadMenuA
GetSubMenu
CheckMenuItem
TrackPopupMenu
DestroyMenu
BeginPaint
EndPaint
SetCapture
ClipCursor
GetCursorPos
ScreenToClient
ReleaseCapture
OffsetRect
FillRect
ClientToScreen
SetCursorPos
ReleaseDC
GetDC
CreateWindowExA
SetWindowLongA
SetWindowPos
SendMessageA
InvalidateRect
LoadImageA
GetSysColor
ShowCursor
IsCharLowerA
CharLowerBuffA
PostMessageA
RegisterHotKey
MessageBoxA
wsprintfA
PeekMessageA
KillTimer
gdi32
DeleteDC
GetStockObject
SelectObject
Polyline
DeleteObject
CreateSolidBrush
CreatePen
CreateFontA
BitBlt
MoveToEx
Rectangle
TextOutA
CreateCompatibleDC
CreatePalette
GetSystemPaletteEntries
GetDIBColorTable
GetDeviceCaps
CreateDIBPatternBrushPt
StretchBlt
RealizePalette
SelectPalette
GdiFlush
CreateDIBSection
GetTextExtentPoint32A
GetTextMetricsA
SetViewportOrgEx
SetBkMode
SetTextAlign
SetTextColor
ExtTextOutA
SetBkColor
GdiSetBatchLimit
LineTo
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegSetValueA
shell32
DragQueryFileA
DragQueryPoint
DragFinish
ShellExecuteA
DragAcceptFiles
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
Sections
.text Size: 624KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 639KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ