950bf54986d81433d8ff0d8142d9555819d167666b47b195d360974466716a28N

Sharing

Copy URL Twitter E-mail

General

Target

950bf54986d81433d8ff0d8142d9555819d167666b47b195d360974466716a28N
Size

2.5MB
MD5

5a43564a331d0a6f27dba05a1aa456a0
SHA1

f0cb3ae4cffe0506d1c700546ef3790dbf78612d
SHA256

950bf54986d81433d8ff0d8142d9555819d167666b47b195d360974466716a28
SHA512

028dd5b9355d06b15c4f34fea7f0dbe303dae42d7afe2e099062e235d249a83ca27a9f3d22bcb03d65484e6d99718741acc40701c8626ab932449773cc10e397
SSDEEP

24576:xtMjSgFjzhNrPTEFgfIe6cJsZN85VEkj/07J9oBCerWVZLveKTjfmzgy/fzkj9Kj:xmj3X3c0LRcOWVZLmKTQgyXzkjkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
950bf54986d81433d8ff0d8142d9555819d167666b47b195d360974466716a28N

Files

950bf54986d81433d8ff0d8142d9555819d167666b47b195d360974466716a28N
.exe windows:5 windows x86 arch:x86

451a9edf1b943a9be58fae288d1f90a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\AFWebDown\release\AFWebDown.pdb

Imports

iphlpapi

GetAdaptersInfo

imm32

ImmSetConversionStatus
ImmGetConversionStatus
ImmGetContext
ImmReleaseContext

kernel32

HeapSize
SetStdHandle
GetFileType
HeapCreate
VirtualFree
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
FindResourceA
SizeofResource
LockResource
LoadResource
CreateFileMappingA
GetLastError
WideCharToMultiByte
GetModuleHandleA
DuplicateHandle
GetCurrentProcess
GetExitCodeProcess
GetProcAddress
CreateRemoteThread
WaitForSingleObject
CloseHandle
SetLastError
OpenProcess
Sleep
GetTempPathA
CreateProcessA
GetFileAttributesA
CreateEventA
SetEvent
ResumeThread
SetThreadPriority
CreateDirectoryA
GetDiskFreeSpaceA
GetTickCount
GetModuleFileNameA
CreateFileA
WriteFile
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
LoadLibraryA
MulDiv
lstrlenA
lstrcpynA
MultiByteToWideChar
FreeLibrary
WinExec
lstrcpyA
FreeResource
ResetEvent
ExitProcess
GetCurrentProcessId
LocalFree
FormatMessageA
lstrcmpA
InterlockedExchange
CompareStringA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
WritePrivateProfileStringA
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
DeleteFileA
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetVolumeInformationA
GetFullPathNameA
SuspendThread
GlobalAddAtomA
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleFileNameW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCurrentDirectoryA
GetFileSizeEx
GetFileTime
SetErrorMode
GetCPInfo
GetOEMCP
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
GetDriveTypeA
VirtualAlloc

user32

GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
SetWindowsHookExA
CallNextHookEx
GetMessageA
ValidateRect
CharUpperA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndDialog
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
GetMenuState
GetMenuItemID
GetMenuItemCount
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetRectEmpty
GetDesktopWindow
SetLayeredWindowAttributes
GrayStringA
DrawTextExA
TabbedTextOutA
DrawTextA
SetWindowLongA
IsWindowVisible
GetFocus
LoadCursorA
LoadBitmapA
SetRect
ReleaseCapture
SetCapture
ScreenToClient
GetCursorPos
GetClassInfoExA
IsRectEmpty
PtInRect
GetCapture
KillTimer
IntersectRect
GetWindow
GetNextDlgGroupItem
GetKeyState
LoadImageA
DrawStateA
OffsetRect
DrawFocusRect
CopyRect
PostMessageA
TrackPopupMenuEx
GetSubMenu
GetActiveWindow
WindowFromPoint
ClientToScreen
SetCursor
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyMenu
DestroyCursor
ExitWindowsEx
TranslateMessage
PeekMessageA
DispatchMessageA
ReleaseDC
RedrawWindow
IsWindow
GetScrollPos
CreateWindowExA
SetForegroundWindow
SetScrollPos
FillRect
GetSysColorBrush
GetSysColor
UpdateWindow
InvalidateRect
FrameRect
GetDC
InflateRect
GetParent
DrawIcon
GetSystemMetrics
IsIconic
AppendMenuA
GetSystemMenu
GetClientRect
GetWindowRect
LoadIconA
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
SendMessageA
EnableWindow
SetTimer
UnregisterClassA
UnhookWindowsHookEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
EqualRect

gdi32

BitBlt
CreateCompatibleDC
AddFontResourceA
EnumFontsA
CreateSolidBrush
CreateFontIndirectA
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectClipRgn
SetMapMode
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
PlayEnhMetaFile
SetEnhMetaFileBits
GetEnhMetaFileHeader
DeleteEnhMetaFile
SetWinMetaFileBits
SaveDC
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
RealizePalette
GetDIBits
Escape
ExtTextOutA
RectVisible
PtVisible
CombineRgn
CreateRoundRectRgn
CreateEllipticRgn
CreateRectRgn
TextOutA
SetTextJustification
LineTo
MoveToEx
SetBkMode
GetTextMetricsA
GetTextExtentPoint32A
SetRectRgn
CreateRectRgnIndirect
CreatePen
GetDeviceCaps
PtInRegion
GetRgnBox
GetCurrentObject
CreateDIBSection
SetPixel
GetPixel
DeleteDC
SetTextColor
SetBkColor
CreateBitmap
CreateCompatibleBitmap
GetStockObject
RemoveFontResourceA
SelectObject
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegDeleteValueA
OpenProcessToken
RegSetValueExA
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegOpenKeyA
AdjustTokenPrivileges
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA

shell32

ShellExecuteExA
ShellExecuteA

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA

ole32

CreateStreamOnHGlobal

oleaut32

VariantInit
VariantChangeType
VariantClear
OleLoadPicture

wsock32

WSASetLastError
WSACleanup
WSAStartup
ntohl
htonl
ntohs
htons

gdiplus

GdipDrawLineI
GdipCreatePath
GdipSetPageUnit
GdipDrawPath
GdipFillPath
GdipCreateRegionHrgn
GdipDeleteRegion
GdipSetClipRegion
GdipCreateBitmapFromHBITMAP
GdipCreateRegion
GdipCreateRegionRectI
GdipSetEmpty
GdipCombineRegionRegion
GdipGetPageUnit
GdipSetLinePresetBlend
GdipSetLineWrapMode
GdipCreatePathGradientFromPath
GdipSetPathGradientCenterPointI
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetPathGradientCenterColor
GdipCreateRegionPath
GdipCloneRegion
GdipFillEllipseI
GdipResetClip
GdipGetImageGraphicsContext
GdipTranslateRegionI
GdipDrawImageRectRectI
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipAddPathPolygonI
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawString
GdipSetPathFillMode
GdipGetImageBounds
GdipDrawImageRectRect
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipSetTextRenderingHint
GdipFillRectangleI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetClipRectI
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipDrawEllipse
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipAddPathArcI
GdipAddPathEllipseI
GdipClosePathFigure
GdipAddPathRectangleI
GdipResetPath
GdipDrawImage
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdiplusShutdown
GdipCreateBitmapFromScan0
GdiplusStartup
GdipDeletePath
GdipCreateLineBrushFromRectI

psapi

EnumProcesses
GetModuleFileNameExA
EnumProcessModules

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

wininet

InternetSetStatusCallback
InternetSetOptionExA
InternetGetLastResponseInfoA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA

winmm

PlaySoundA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

451a9edf1b943a9be58fae288d1f90a9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

iphlpapi

imm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wsock32

gdiplus

psapi

version

wininet

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 342KB - Virtual size: 342KB

.data Size: 23KB - Virtual size: 87KB

.rsrc Size: 674KB - Virtual size: 673KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 342KB - Virtual size: 342KB

.data
Size: 23KB - Virtual size: 87KB

.rsrc
Size: 674KB - Virtual size: 673KB