The USBUtil v2 2 rev1 0 exe File Malware Analysis

Technical Analysis

File Name	USBUtil v2.2 rev1.0.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.231.174
Database Version	2026-01-07 03:00:38 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	582bd887ef644b20df4ca0765e7ff6f2
SHA1	8dd7af5707c125087cc8a1803ffac390ad2d0dab
SHA256	bc26534208b5f8f21fc7838ccba9f1649fe506172e09e95fb4430a90509c1dfa
SHA512	7aedcc8c0cc69445eb3eca13c347f6a67d5e7eef070e657ec248fd1027db18df4043e85efc698371235027fac75ab0d56e8f10c6dffb9f1f029992bff1b043d0
ImpHash	2a0128b267b60e673d9d18aa913edd31

PE Analysis

Basic Information

▼

Icon	Hash: 0ef43bb304bf03f5251ffff5cad2dd0d Fuzzy: 2f8fcaf07ac53681f98ccaae50b82b9f dHash: 9595951692d59622
Image Base	`0x00300000`
Entry Point	`0x003bd5d0`
Compilation Time	1992-06-19 22:22:17
Checksum	0x00000000 (Actual: 0x00147c39)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	9 libraries kernel32, user32, advapi32, oleaut32, version, gdi32, ole32, comctl32, shell32
Exports	0 functions
Resources	69 Resources
Sections	8 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`CODE`	`0x00001000`	771,740 bytes	772,096 bytes	6.57 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`05E4B2D55231581634E74A089AAFCB4C`
`DATA`	`0x000be000`	9,120 bytes	9,216 bytes	4.18 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F7E4AE991AB81573F89662E840E9A379`
`BSS`	`0x000c1000`	18,886,821 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x012c5000`	9,792 bytes	10,240 bytes	4.95 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CA3267A0E1B65DA9CA26D12BA2DF41CD`
`.tls`	`0x012c8000`	16 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x012c9000`	24 bytes	512 bytes	0.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`9FF724D8D7AED36F9DBBA674427CFF60`
`.reloc`	`0x012ca000`	46,552 bytes	46,592 bytes	6.72 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`56E871AAEB7AF85FBF73D4FD8F20C56D`
`.rsrc`	`0x012d6000`	442,880 bytes	442,880 bytes	6.78 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`F61C2E339B6868C05B77A8CB1E2A4C27`

Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 69 (438,325 bytes)

Resource Type	Count	Total Size	Percentage
RT_CURSOR	7	2,156 bytes	0.5%
RT_BITMAP	22	7,196 bytes	1.6%
RT_ICON	6	22,384 bytes	5.1%
RT_DIALOG	1	82 bytes	0%
RT_STRING	18	11,160 bytes	2.5%
RT_RCDATA	7	395,117 bytes	90.1%
RT_GROUP_CURSOR	7	140 bytes	0%
RT_GROUP_ICON	1	90 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The USBUtil v2.2 rev1.0.exe File Analysis