USBDeview[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

USBDeview.dll
Size

10.9MB
MD5

82d3abf85671f2f088876e4ead5e85b6
SHA1

52175e10ab7115059ca6a275f64e291607bd406f
SHA256

7a1148b3af8b6ee1d2e0ac31a44015282a2007e1608b70820376718b40db8dac
SHA512

bd02285c434a825671309d6d8f1cb523dd3c65bffab558e770da7b33f92c38ed9a8d96352b87a213b754037d52c487e6f287d61af6fc2229f3897ca29127f9d5
SSDEEP

196608:kd/bIqR2ALh9HR9UJvlAGuHynX70291mOs94xwNIskffRE7L51BI:OcqR2ALh9UJjueQum//N/AfRE7LtI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
USBDeview.dll

Files

USBDeview.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

a0d80c2b4744bb286144762220226321
a11e3f6f694cdad2b3c12abe8353ebc6
a812902c47d3cf9aa9bb9f8723efc64c
ab1bf35968cf4962ca2821656ed9a764
b31d032cfdcf47a399990a71e43c5d2a
b422f727a7539eaad0164eb43fc012e0
bb74baf9a32ef73e2e49faa2c9076f24
bca5dbb75b447315cfd298b817a041b5
bd28f02e8d6b678c395300c32c8a9959
c0f2ee7c2b21afffc7ff91815942a77f
c238dce9db68fc15aecfb5c02e1c2f67
c2465a17cfa162e4ecd88cbf41157a6c
c47980282dd1dabfe777a42b44fe6929
c8ccd4f6f72491a037b58742b9d1143c
c942c5ce22f14f22819bf7152a121884
c9791826da23403ec5075672d9e6ef66
c9d4d01ba0e6d49ffe9a5b6f17c8d7a8
cb98a7985ef622420f70243bf5550db3
ced0063a3279def0739c01fdaa15afc2
d63d0e21fdc05f618d55ef306c54af82
d93c9d8ef9feec030660d85f8de7fb1f
dd745d3953658bdfed3f7135a2a58e73
de2d0c0edf158e84bba958a74b345e44
e0326c2e544878febfbd8670a46d8090
e29dd7309fe40ba7f2dc1c3287fbc290
e38eb544cabd9e60c82410a4ce5b74f8
e8f0aad77c93ac3ebff67a4c18c60848
ea51b35b238a4139dc45a5ab9daae5d7
ec63d135ff7817e1a2b625676a2ef703
f5e1c836476fde8287cf16b4e6657295
f6410f8fc76ebd2883a468fdace871c5
fc666666bd301fefb45f47c082951986
fc8cc3b771c477f0ec4f4c987366a7fb
gd22c118b36c4800f23bce730b48866b
i5e469e17c7d2d72f8a64a3f50aa177c
pe185265bb6b006fd90f1aa39dcda5d9
u8cd4da22a687d3c9d86b6f61f9b6138

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rb_ui
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.stbtext
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rb_rdt
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: - Virtual size: 15.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rb_ui Size: 138KB - Virtual size: 137KB

.stbtext Size: 32KB - Virtual size: 31KB

.rdata Size: 398KB - Virtual size: 397KB

.data Size: 24KB - Virtual size: 263KB

.pdata Size: 52KB - Virtual size: 51KB

.rb_rdt Size: 79KB - Virtual size: 78KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1024B - Virtual size: 656B

.reloc Size: 4KB - Virtual size: 3KB

.edata Size: 2KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.themida Size: - Virtual size: 15.0MB

.boot Size: 8.4MB - Virtual size: 8.4MB

.reloc Size: 16B - Virtual size: 4KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rb_ui
Size: 138KB - Virtual size: 137KB

.stbtext
Size: 32KB - Virtual size: 31KB

.rdata
Size: 398KB - Virtual size: 397KB

.data
Size: 24KB - Virtual size: 263KB

.pdata
Size: 52KB - Virtual size: 51KB

.rb_rdt
Size: 79KB - Virtual size: 78KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1024B - Virtual size: 656B

.reloc
Size: 4KB - Virtual size: 3KB

.edata
Size: 2KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.themida
Size: - Virtual size: 15.0MB

.boot
Size: 8.4MB - Virtual size: 8.4MB

.reloc
Size: 16B - Virtual size: 4KB