Rinzler-USB-Cleaner[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Rinzler-USB-Cleaner.exe
Size

64KB
MD5

7df4aa347fa06875dc24dbe243e037a4
SHA1

cbe37b0fe857ef047f72b781f0f07605765eb177
SHA256

6d0b4bd801dffb023ead92c62e9a8d579ce34097c20690e6ad5b1ffb7245b0ad
SHA512

ff6caa76185ebad285dc0bd2fbac928e39c8b8ced10a95c02d4ad0296a89c1375808bf3f21672ba02e524675c625a20f5cfe37b541b9c1c6c6bf5d6db497d4f8
SSDEEP

768:cRyh8OicOoQxJ4dH/DnzB9+yLuBi0ZtdjwjxL2EI38nAEtCoCLes/NFuRqC:bhOcOophdLGiyDjwjxn1Aw5Bs/NFCqC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rinzler-USB-Cleaner.exe

Files

Rinzler-USB-Cleaner.exe
.exe windows:4 windows x86

3691be42d78a58068b4cf745d980a50e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt5core

_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEjjj6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsERK7QString
_ZN16QCoreApplication4quitEv
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN5QDate11currentDateEv
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN5QTime11currentTimeEv
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString17fromLatin1_helperEPKci
_ZN7QString18toLocal8Bit_helperEPK5QChari
_ZN7QString6appendERKS_
_ZN7QString9fromUtf16EPKti
_ZN7QStringaSERKS_
_ZN8QProcess15waitForFinishedEi
_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN8QProcessC1EP7QObject
_ZN9QIODevice7readAllEv
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK5QDate8toStringEN2Qt10DateFormatE
_ZNK5QTime8toStringEN2Qt10DateFormatE
_ZNK7QObject10objectNameEv

qt5gui

_ZN5QIcon7addFileERK7QStringRK5QSizeNS_4ModeENS_5StateE
_ZN5QIconC1Ev
_ZN5QIconD1Ev

qt5widgets

_ZN10QStatusBarC1EP7QWidget
_ZN11QMainWindow10addToolBarEN2Qt11ToolBarAreaEP8QToolBar
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow12setStatusBarEP10QStatusBar
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow18setToolButtonStyleEN2Qt15ToolButtonStyleE
_ZN11QMainWindow21setDockNestingEnabledEb
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox7setTextERK7QString
_ZN11QMessageBoxC1EP7QWidget
_ZN11QMessageBoxD1Ev
_ZN11QPushButton10setDefaultEb
_ZN11QPushButton14setAutoDefaultEb
_ZN11QPushButton7setFlatEb
_ZN11QPushButtonC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN15QAbstractButton7setTextERK7QString
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabel20setOpenExternalLinksEb
_ZN6QLabel23setTextInteractionFlagsE6QFlagsIN2Qt19TextInteractionFlagEE
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QAction7setTextERK7QString
_ZN7QActionC1EP7QObject
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11setTabOrderEPS_S0_
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setFixedSizeEii
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget13setWindowIconERK5QIcon
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16setWindowOpacityEd
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget17setWindowModalityEN2Qt14WindowModalityE
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget18setToolTipDurationEi
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget5raiseEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QToolBarC1EP7QWidget
_ZN9QComboBox11setEditableEb
_ZN9QComboBox15setCurrentIndexEi
_ZN9QComboBox8setModelEP18QAbstractItemModel
_ZN9QComboBoxC1EP7QWidget
_ZN9QDirModelC1EP7QObject
_ZN9QTextEdit10moveCursorEN11QTextCursor13MoveOperationENS0_8MoveModeE
_ZN9QTextEdit11setReadOnlyEb
_ZN9QTextEdit15insertPlainTextERK7QString
_ZN9QTextEdit5clearEv
_ZN9QTextEdit7setTextERK7QString
_ZN9QTextEditC1EP7QWidget
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QComboBox11currentTextEv
_ZNK9QComboBox12currentIndexEv
_ZNK9QComboBox5countEv
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strcmp
strlen
strncmp
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdlPv
_Znwj
__gxx_personality_v0

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3691be42d78a58068b4cf745d980a50e

Headers

File Characteristics

Imports

qt5core

qt5gui

qt5widgets

libgcc_s_dw2-1

kernel32

msvcrt

libstdc++-6

Sections

.text Size: 38KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 76B

.rdata Size: 9KB - Virtual size: 9KB

.eh_fram Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 1KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.text
Size: 38KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 76B

.rdata
Size: 9KB - Virtual size: 9KB

.eh_fram
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 1KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B