Static task
static1
Behavioral task
behavioral1
Sample
PeToUSB_3.0.0.8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PeToUSB_3.0.0.8.exe
Resource
win10v2004-20230915-en
General
-
Target
PeToUSB_3.0.0.8.exe
-
Size
293KB
-
MD5
c97072a39df1b550d11449a4f4c565ca
-
SHA1
bb43f9c75c27b90d11cdd3b951d794e720229837
-
SHA256
80e613c51a6ad6854d5bdafac97c2e01a316fc95f320ae3f0002e642482e2ff8
-
SHA512
cf1d5b92740b06fd97335f3cf9345f5b9de25287c597649c763830b624406b1c99b29bb67c991e155aa773cf9e43f393840ae44be18e39353fbe4876d827c47f
-
SSDEEP
3072:WIsURZfpCoJpmVRDP5xnmSK5BbSt9JiOTCjMADyRXl+icAYVpO:mURpLC15xumt9JieCYADFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PeToUSB_3.0.0.8.exe
Files
-
PeToUSB_3.0.0.8.exe.exe windows:5 windows x86
f002ed298ac6153fa4b37bc08ebbaea0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeMountPointA
GetVolumeNameForVolumeMountPointA
DefineDosDeviceA
QueryDosDeviceA
ReadFile
WriteFile
SetFilePointer
FindClose
FindFirstFileA
MultiByteToWideChar
GetFileAttributesA
GetFileAttributesExA
CopyFileA
DeleteFileA
SetFileAttributesA
CompareFileTime
FindNextFileA
CreateDirectoryA
InitializeCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
GetLogicalDriveStringsA
GetModuleFileNameA
GetPrivateProfileStructA
WritePrivateProfileStructA
GetSystemDirectoryA
Sleep
CreateThread
SetLastError
DeviceIoControl
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetVolumeInformationA
CreateFileA
CloseHandle
GetLastError
DeleteVolumeMountPointA
GetLogicalDrives
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
FlushFileBuffers
GetModuleHandleA
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
user32
SetDlgItemTextA
SetClassLongA
GetDlgItem
CreateWindowExA
GetDesktopWindow
GetWindowRect
DestroyWindow
RegisterDeviceNotificationA
SetTimer
UnregisterDeviceNotification
KillTimer
SetForegroundWindow
SetFocus
ShowWindow
SetWindowPos
FlashWindowEx
IsWindow
CheckDlgButton
EnableWindow
GetDlgItemTextA
SetWindowTextA
UpdateWindow
IsDlgButtonChecked
LoadIconA
SendMessageA
SendDlgItemMessageA
MessageBoxA
DialogBoxParamA
EndDialog
LoadCursorA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetDesktopFolder
comctl32
ord17
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ