usbshow40-1[.]0[.]0[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

usbshow40-1.0.0.zip
Size

108KB
MD5

c225dd6d6a3f68b7cd987fd206a18319
SHA1

ff9edeb36dbe36709d50704e5acb04b164a21ecb
SHA256

aff1029c6c1e7b5affd625da93eb29508c383f994607d6c0385526de84a23be6
SHA512

ab4ccc68f1d3b82eae623af1977dcd9305bc20883996cca60d6bfa53742fbfe859bc14fc608708929d8df9f28a58323c3c6a0a9bdf85c88e93eaf8c7cec1db6f
SSDEEP

3072:qk2Vh8++Lme6q6emmLjMFtA8PR0L+2/SAx:qk2j0LmJ6Mg84fx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/USB Show.exe

Files

usbshow40-1.0.0.zip
.zip
Leeame.txt
USB Show.exe
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 97KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE