USBVS_PCDRV_LB_1_00_0060[.]exe

General

Target
USBVS_PCDRV_LB_1_00_0060.exe
Size 56.3MB
Sample260827-pycsmsvdme
SHA256 7a5e5f6f15c665d63cc03d98d7d17e9e1e92e1c394a73920cc4c831b7b3ce7ad
MD5 4e407cbf2d0324d9877de5567e2bc41e
SHA1 bb7363a52b327a7b10c833f2af2811863035c355
SHA512 f42991b81b8231ae612ffd5606dc082e116e074dfd557e704001020e62f07b55fc1b93aaa4e6b63d7582785d840e0b25cd89887f478353c44a8c62065498333e
SSDEEP 1572864:qMTcVDASnDMDq86y+sPXRF/bNvbOk5KAXmEPiYSRJA7:Jw6SDMq86yrPzVOI6S7
TLSH
T16ED733F2E88DAFC9F6F5C6B790D9E2C84820704AA054E63AE72C5B5DD9670D5CEB40C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
USBVS_PCDRV_LB_1_00_0060.exe

File Explorer

USBVS_PCDRV_LB_1_00_0060.exe

.exe 56.3MB

USBVS_PCDRV_LB_1_00_0060.exe

IMPHASH af4e4b390dfae32202db4dcaa8228d77
SHA256 7a5e5f6f15c665d63cc03d98d7d17e9e1e92e1c394a73920cc4c831b7b3ce7ad
MD5 4e407cbf2d0324d9877de5567e2bc41e
SHA1 bb7363a52b327a7b10c833f2af2811863035c355
SHA512 f42991b81b8231ae612ffd5606dc082e116e074dfd557e704001020e62f07b55fc1b93aaa4e6b63d7582785d840e0b25cd89887f478353c44a8c62065498333e
SSDEEP 1572864:qMTcVDASnDMDq86y+sPXRF/bNvbOk5KAXmEPiYSRJA7:Jw6SDMq86yrPzVOI6S7
TLSH
T16ED733F2E88DAFC9F6F5C6B790D9E2C84820704AA054E63AE72C5B5DD9670D5CEB40C4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

41132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteFileA GetFileAttributesA CreateDirectoryA SetFileAttributesA CloseHandle SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA GetWindowsDirectoryA lstrcmpiA ReadFile GetFileSize CreateProcessA CopyFileA RemoveDirectoryA GetExitCodeProcess WaitForSingleObject GetCurrentProcess GetCommandLineA SetCurrentDirectoryA GetFullPathNameA GetModuleFileNameA GetModuleHandleA FreeLibrary GetProcAddress LoadLibraryA ExitThread FindNextFileA Sleep CreateThread TerminateThread IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter FlushFileBuffers LCMapStringW LCMapStringA GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter SetStdHandle GetStdHandle SetHandleCount SetEndOfFile IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetVersionExA FindFirstFileA lstrcmpA MultiByteToWideChar FindClose GetEnvironmentVariableA GetOEMCP GetACP GetCPInfo GetStringTypeW HeapFree HeapAlloc GetLastError GetFileType WriteFile SetFilePointer ExitProcess TerminateProcess RtlUnwind GetStartupInfoA GetVersion GetStringTypeA

user32

SetWindowTextA DefWindowProcA DestroyWindow CreateWindowExA LoadCursorA RegisterClassExA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA PostQuitMessage PostMessageA EnableWindow ShowWindow UpdateWindow LoadStringA WaitForInputIdle MessageBoxA DialogBoxParamA EndDialog SetDlgItemTextA LoadIconA

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc FindExecutableA

Sharing