USBRecoveryCreator[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

USBRecoveryCreator.exe
Size

5.3MB
MD5

49e7ae3e77963259a28add506a9e0341
SHA1

bf22e7fa3e02e112eaae56eaf88bf60cb6368cee
SHA256

d5a1197fdfcb8dd4029b476e4f6b239c5df1cd03cdfae0b20a8c905114fb70ab
SHA512

bb0af2f6f253909cc0ebd5ee437b6841594d009088773c9cca24d9a5ddc9ff20b19c2c1ee62af4a06ddf23741853c02b98081a39ec834c80d9cae49f93579bfa
SSDEEP

49152:nOKzt9shDK7/cYzD39O8HrnBwFUDi0IXRMRfN+FO3TItFSYykTEsISoOJE:nOKjMC7X9OwwFUDi0IXWRiTEs9oF

Score

1^/10

Malware Config

Signatures

Files

USBRecoveryCreator.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06-04-2022 07:41

Not After

08-05-2033 07:41

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:2a:ba:55:3d:54:db:0a:1b:7d:31:6c:23:a0:61:6c
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

04-10-2022 00:00

Not After

04-10-2023 23:59

Subject

CN=Lenovo,OU=G08,O=Lenovo,L=Morrisville,ST=North Carolina,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8b:a3:e6:4d:9f:27:7f:9c:12:5a:c2:cf:e6:a8:2b:44:60:8d:9c:cc:7a:80:c8:44:a0:c2:c8:94:31:18:ee:95
Signer

Actual PE Digest

8b:a3:e6:4d:9f:27:7f:9c:12:5a:c2:cf:e6:a8:2b:44:60:8d:9c:cc:7a:80:c8:44:a0:c2:c8:94:31:18:ee:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:2a:ba:55:3d:54:db:0a:1b:7d:31:6c:23:a0:61:6cCertificate

Extended Key Usages

Key Usages

8b:a3:e6:4d:9f:27:7f:9c:12:5a:c2:cf:e6:a8:2b:44:60:8d:9c:cc:7a:80:c8:44:a0:c2:c8:94:31:18:ee:95Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5.0MB - Virtual size: 5.0MB

.rsrc Size: 366KB - Virtual size: 365KB

.reloc Size: 512B - Virtual size: 12B

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:2a:ba:55:3d:54:db:0a:1b:7d:31:6c:23:a0:61:6c
Certificate

8b:a3:e6:4d:9f:27:7f:9c:12:5a:c2:cf:e6:a8:2b:44:60:8d:9c:cc:7a:80:c8:44:a0:c2:c8:94:31:18:ee:95
Signer

.text
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 366KB - Virtual size: 365KB

.reloc
Size: 512B - Virtual size: 12B