home

afu.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from bios-mods.com and multiple other hosts.
MD5:
57d5258dda5aef6a28698a1b7b0ec10f

SHA-1:
7b104fd4e6da657066bab72e8fd941cf537d2995

SHA-256:
d06260234159bcabaef18d28fd936e345945029b25f3921ae15cd50e7e9f5121

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 1:48:41 AM UTC  (today)

File size:
111.4 KB (114,064 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS version:
58304.0

OS bitness:
Win64

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:5Joycu6dBesDgoyou0PLRMcfrSjWdleKWw+:5Jo7u6dwmE4McfrSjWHeKg

Entry address:
0x23960

Entry point:
4D, 5A, 00, 01, 17, 00, 00, 00, 04, 00, B4, 06, FF, FF, D7, 03, 00, 01, 00, 00, 5E, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 2D, 00, 00, 04, 00, 01, 40, 00, 80, 00, 08, 08, 20, 01, 01, 00, 00, 00, FF, FF, FF, 7F, 00, 00, 50, 4D, 4F, 44, 45, 2F, 57, 20, 76, 31, 2E, 33, 33, 20, 44, 4F, 53, 20, 65, 78, 74, 65, 6E, 64, 65, 72, 20, 2D, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 31, 39, 39, 34...
 
[+]

Entropy:
7.8304  (probably packed)

Code size:
2 Bytes (2 bytes)

The file afu.exe has been seen being distributed by the following 2 URLs.

http://bios-mods.com/dropbox/TheWiz/.../AFUDOS.exe

http://downloadt.advantech.com/.../downloadsr.aspx?File_Id=GF-247I8

Scan afu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.