USBBALSTER[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

USBBALSTER.exe
Size

1.2MB
MD5

96725e1bfb5b5b83ee5b5ab5c6f51ce7
SHA1

45e2734ee3e33a6d5a65849f65ee673f1d414c1f
SHA256

239aa1bc40c65e5594dec0cc1949bc832389e352ae24e888166210e6837e0bbe
SHA512

c89772f15addf9bdb858d08a17595bb878c6ec845058b885ee49140b4d4353724f47a615092c8d6c919e0f3b62f3bfa36b34b399a62f9e04669872112b5a4230
SSDEEP

24576:XfCC0lajmQdcLfjgs495u0eIVQnUz37b2RKLqB+yJ9lCaS80:xIb+dVQUzQl9X0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
USBBALSTER.exe

Files

USBBALSTER.exe
.exe windows x86

910ed6910f5d69836b666ac6a6dd85cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
timeSetEvent
mmioClose
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mmioSeek
mmioSetInfo
mmioAdvance
mmioGetInfo
waveOutClose
waveOutReset
waveOutUnprepareHeader
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop

dsound

ord1

kernel32

SizeofResource
GetOEMCP
FileTimeToSystemTime
GetCPInfo
GetProcessVersion
SetErrorMode
FileTimeToLocalFileTime
GetCurrentDirectoryA
RtlUnwind
HeapFree
SetEnvironmentVariableA
WritePrivateProfileStringA
GetDriveTypeA
ExitProcess
TerminateProcess
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
SetHandleCount
GetStdHandle
RaiseException
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
TlsGetValue
GlobalFlags
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
MulDiv
GetFileAttributesA
GlobalLock
GlobalUnlock
Sleep
IsBadReadPtr
IsBadWritePtr
GlobalReAlloc
GetSystemInfo
GetTickCount
GetModuleHandleA
OutputDebugStringA
GetVersionExA
GetModuleFileNameA
CopyFileA
GetTempFileNameA
LocalReAlloc
LocalAlloc
LocalFree
GlobalAlloc
GlobalSize
DeleteFileA
GlobalFree
GetTempPathA
InterlockedExchange
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetCurrentThread
lstrcmpA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
FindNextFileA
FormatMessageA
GetFileTime
GetFileSize
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
WideCharToMultiByte
MultiByteToWideChar
GetProfileStringA
InterlockedIncrement
lstrlenA
InterlockedDecrement
FreeLibrary
SetLastError
LoadLibraryA
LockResource
FindResourceA
LoadResource
GetCurrentThreadId
GetVersion
lstrcatA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
lstrcpyA
GlobalFindAtomA
GlobalDeleteAtom
CreateEventA
GetProcAddress
lstrcpynA
WinExec
ReleaseMutex
CreateMutexA
GetLastError
UnmapViewOfFile
OpenFileMappingA
VirtualFree
MapViewOfFile
CloseHandle
CreateFileMappingA
GetEnvironmentStrings
VirtualAlloc
GetEnvironmentStringsW
HeapAlloc
GetFileType

user32

GetClassNameA
GetDesktopWindow
GetSysColorBrush
DestroyMenu
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
SetParent
PostThreadMessageA
PostQuitMessage
LoadStringA
GetMessageA
ValidateRect
CharUpperA
wvsprintfA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetTimer
WindowFromPoint
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
GetWindowPlacement
FindWindowA
GetDlgCtrlID
SetWindowPos
IsIconic
GetSystemMenu
AppendMenuA
LoadIconA
PeekMessageA
TranslateMessage
DispatchMessageA
GetKeyboardState
GrayStringA
DrawTextA
TabbedTextOutA
RedrawWindow
ScreenToClient
PtInRect
LoadImageA
SetCursor
IsWindow
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetCursorPos
DrawIconEx
SystemParametersInfoA
PostMessageA
wsprintfA
LoadCursorA
CreateIconIndirect
GetDC
MessageBoxA
ReleaseDC
GetIconInfo
DrawIcon
GetSystemMetrics
FillRect
DestroyIcon
IntersectRect
IsRectEmpty
OffsetRect
EnableWindow
GetWindowRect
UpdateWindow
KillTimer
SetRectEmpty
MapDialogRect
SetWindowContextHelpId
GetClassInfoA
CopyRect
GetFocus
GetParent
GetWindowLongA
SendMessageA
LoadBitmapA
InvalidateRect
SetRect
GetClientRect
InflateRect
DrawFocusRect
GetSysColor
DrawStateA
GetMessageTime
RemovePropA
SetActiveWindow
DefDlgProcA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
IsWindowUnicode

gdi32

CreateBitmap
CreatePolygonRgn
Polygon
CreateEllipticRgnIndirect
StretchBlt
CreateSolidBrush
CreateDCA
CreateFontA
CreateCompatibleBitmap
BitBlt
CreatePen
GetObjectA
CreateCompatibleDC
CreateRectRgn
GetTextExtentPointA
GetStockObject
SelectObject
Rectangle
CombineRgn
CreateRectRgnIndirect
FillRgn
OffsetRgn
FrameRgn
CreateFontIndirectA
RectInRegion
DeleteObject
Ellipse
PtInRegion
Escape
CreatePalette
GetDeviceCaps
CreateDIBitmap
SetDIBits
SetDIBitsToDevice
DeleteDC
SetBkColor
GetMapMode
DPtoLP
SetMapMode
GetClipBox
SetTextColor
SaveDC
RestoreDC
SetBkMode
SetViewportOrgEx
OffsetViewportOrgEx
SetStretchBltMode
ScaleViewportExtEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
ExtTextOutA
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PatBlt
SetRectRgn
StretchDIBits
GetCharWidthA
GetTextMetricsA
GetTextColor
GetBkColor
LPtoDP
TextOutA
RectVisible
PtVisible
RealizePalette
GetDIBits
CreateRoundRectRgn
SelectPalette
CreateEllipticRgn
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ImageList_Create
ImageList_Destroy
ord17
ImageList_Replace
ImageList_AddMasked
_TrackMouseEvent

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

SysFreeString
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

910ed6910f5d69836b666ac6a6dd85cf

Headers

File Characteristics

Imports

winmm

dsound

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 484KB - Virtual size: 480KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 28KB - Virtual size: 45KB

.rsrc Size: 60KB - Virtual size: 57KB

.text
Size: 484KB - Virtual size: 480KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 28KB - Virtual size: 45KB

.rsrc
Size: 60KB - Virtual size: 57KB