f_0275de[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

f_0275de.zip
Size

3.3MB
MD5

1d089c249fd058f90220482e31e9a83f
SHA1

a9594d96375e3c713270e75b63bcde894a61fda7
SHA256

e4bef1e51606097c0717a0941f86211004406c8e267a0dc3ebbd576fd80874e7
SHA512

07a561d271021751a783dd09c63c20c5be5c1fa645326ebd138c86b4e8447a0d7e8faeebd137d6ff860eaae4377840bddb6a3df15501204547cd624a0aea88ee
SSDEEP

98304:8308Ua0cgfMStTJ1jLJCdzBkSDBsUAArZeK4:mhxgfMSz1fJCpqSDBNA4ZeK4

Score

N/A

Malware Config

Signatures

Files

f_0275de.zip
.zip

Password: infected
f_0275de
.rar
CH341A - USB Programmer 1.30/CH341A - USB Programmer 1.30.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CH341A - USB Programmer 1.30/CH341PAR drivers/CH341DLL.DLL
.dll windows x86

8c17c46120b9339216e4036e6840553f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CloseHandle
Sleep
GetOverlappedResult
GetLastError
DeviceIoControl
ResetEvent
CreateEventA
CreateFileA
lstrcpyA
SetThreadPriority
CreateThread
LocalFree
LocalAlloc
GetModuleHandleA
lstrcmpiA

user32

RegisterClassA
UnregisterClassA
CreateWindowExA
UnregisterDeviceNotification
ShowWindow
RegisterDeviceNotificationA
DefWindowProcA
DestroyWindow
CharUpperBuffA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

Exports

Exports

CH341AbortInter
CH341AbortRead
CH341AbortWrite
CH341BitStreamSPI
CH341CloseDevice
CH341CloseDeviceEx
CH341DriverCommand
CH341EppReadAddr
CH341EppReadData
CH341EppSetAddr
CH341EppWriteAddr
CH341EppWriteData
CH341FlushBuffer
CH341GetConfigDescr
CH341GetDeviceDescr
CH341GetDeviceName
CH341GetDeviceNameEx
CH341GetDrvVersion
CH341GetInput
CH341GetStatus
CH341GetVerIC
CH341GetVersion
CH341InitParallel
CH341MemReadAddr0
CH341MemReadAddr1
CH341MemWriteAddr0
CH341MemWriteAddr1
CH341OpenDevice
CH341OpenDeviceEx
CH341QueryBufDownload
CH341QueryBufUpload
CH341ReadData
CH341ReadData0
CH341ReadData1
CH341ReadEEPROM
CH341ReadI2C
CH341ReadInter
CH341ResetDevice
CH341ResetInter
CH341ResetRead
CH341ResetWrite
CH341SetBufDownload
CH341SetBufUpload
CH341SetDelaymS
CH341SetDeviceNotify
CH341SetDeviceNotifyEx
CH341SetExclusive
CH341SetIntRoutine
CH341SetOutput
CH341SetParaMode
CH341SetStream
CH341SetTimeout
CH341Set_D5_D0
CH341SetupSerial
CH341StreamI2C
CH341StreamSPI3
CH341StreamSPI4
CH341StreamSPI5
CH341WriteData
CH341WriteData0
CH341WriteData1
CH341WriteEEPROM
CH341WriteI2C
CH341WriteRead

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ShareArr
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CH341A - USB Programmer 1.30/CH341PAR drivers/CH341W64.SYS
.exe windows x64

9b1def2964cd838f7829b5731e30fffa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IofCallDriver
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
ExFreePool
ExAllocatePool
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeDelayExecutionThread
IoDeleteDevice
IoDetachDevice
RtlFreeUnicodeString
IoSetDeviceInterfaceState
PoStartNextPowerIrp
KeClearEvent
PsTerminateSystemThread
KeSetPriorityThread
ZwClose
PsCreateSystemThread
PoCallDriver
PoSetPowerState
__C_specific_handler
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeBugCheckEx
IofCompleteRequest
PoRequestPowerIrp
KeSetEvent

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CH341A - USB Programmer 1.30/CH341PAR drivers/CH341WDM.CAT
CH341A - USB Programmer 1.30/CH341PAR drivers/CH341WDM.INF
CH341A - USB Programmer 1.30/CH341PAR drivers/CH341WDM.SYS
.exe windows x86

6d37ff886398dc1f20c0e2acfe260460

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoAttachDeviceToDeviceStack
KeInitializeSpinLock
KeInitializeEvent
ExAllocatePool
IoCreateDevice
IoDeleteDevice
ExFreePool
IoDetachDevice
KeSetEvent
RtlFreeUnicodeString
IoSetDeviceInterfaceState
IofCompleteRequest
IoRegisterDeviceInterface
InterlockedIncrement
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
InterlockedExchange
PoStartNextPowerIrp
PoCallDriver
PoSetPowerState
PoRequestPowerIrp
PsTerminateSystemThread
KeClearEvent
KeSetPriorityThread
KeGetCurrentThread
PsCreateSystemThread
InterlockedDecrement
KeDelayExecutionThread
RtlUnwind
ZwClose

hal

KfReleaseSpinLock
KfAcquireSpinLock

usbd.sys

_USBD_ParseConfigurationDescriptorEx@28
_USBD_CreateConfigurationRequestEx@8

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 736B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CH341A - USB Programmer 1.30/CH341PAR drivers/DRVSETUP64/DRVSETUP64.exe
.exe windows x64

81eff7de0e080d88e7bf5cfe2f43528f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__set_app_type
_fmode
_commode
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_exit
_c_exit
_XcptFilter
__C_specific_handler
strrchr
strstr
strchr
memcpy
_stricmp
sprintf
memset
_findfirst
_findnext
_findclose

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
RtlCaptureContext
WinExec
GetFileAttributesA
GetUserDefaultLangID
CreateThread
LoadLibraryA
GetProcAddress
LocalFree
LocalAlloc
GetCurrentDirectoryA
GetLastError
SetLastError
GetCurrentProcess
GetCurrentThreadId
CopyFileA
GetWindowsDirectoryA
CloseHandle
Sleep
lstrlenA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetVersion
DeleteFileA
GetSystemDirectoryA
GetStartupInfoA

user32

SetWindowTextA
SendMessageA
GetWindowTextA
EnumChildWindows
FindWindowExA
SendDlgItemMessageA
MessageBoxA
EndDialog
CharUpperA
SetDlgItemTextA
IsDlgButtonChecked
UpdateWindow
EnableWindow
GetDlgItem
LoadIconA
ShowWindow
DialogBoxParamA
DefWindowProcA

comctl32

ord17

setupapi

CM_Locate_DevNodeA
SetupDefaultQueueCallbackA
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyA
SetupCloseInfFile
SetupDiGetActualSectionToInstallA
SetupOpenInfFileA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupCommitFileQueueA
SetupInstallFilesFromInfSectionA
SetupInitDefaultQueueCallbackEx
SetupOpenFileQueue
SetupDiDestroyDriverInfoList
SetupDiGetDriverInfoDetailA
SetupDiEnumDriverInfoA
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupCopyOEMInfA
CM_Reenumerate_DevNode

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CH341A - USB Programmer 1.30/CH341PAR drivers/SETUP.EXE
.exe windows x86

0278afcdc04c5dc6179089061fc56304

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetFileAttributesA
GetWindowsDirectoryA
WinExec
GetCurrentDirectoryA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
CreateThread
Sleep
GetLastError
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
lstrlenA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
WriteFile
GetSystemDirectoryA
CloseHandle
HeapAlloc
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
SetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetStartupInfoA
GetCommandLineA
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA

user32

UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SetWindowTextA
SendMessageA
EndDialog
MessageBoxA
DialogBoxParamA

comctl32

ord17

cfgmgr32

CM_Reenumerate_DevNode
CM_Locate_DevNodeA

setupapi

SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiSetDeviceRegistryPropertyA
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

CODE Size: 145KB - Virtual size: 145KB

DATA Size: 10KB - Virtual size: 10KB

BSS Size: - Virtual size: 4KB

.idata Size: 6KB - Virtual size: 5KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 6KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 3KB

8c17c46120b9339216e4036e6840553f

Headers

File Characteristics

Imports

kernel32

user32

setupapi

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 6KB

ShareArr Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 848B

.reloc Size: 1024B - Virtual size: 728B

9b1def2964cd838f7829b5731e30fffa

Headers

File Characteristics

Imports

ntoskrnl.exe

usbd.sys

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 408B

.pdata Size: 1024B - Virtual size: 900B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 888B

6d37ff886398dc1f20c0e2acfe260460

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

usbd.sys

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 160B - Virtual size: 132B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 864B - Virtual size: 848B

.reloc Size: 736B - Virtual size: 726B

81eff7de0e080d88e7bf5cfe2f43528f

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

comctl32

setupapi

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 19KB

.pdata Size: 1024B - Virtual size: 768B

.rsrc Size: 4KB - Virtual size: 4KB

0278afcdc04c5dc6179089061fc56304

Headers

File Characteristics

Imports

kernel32

user32

comctl32

CODE
Size: 145KB - Virtual size: 145KB

DATA
Size: 10KB - Virtual size: 10KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 6KB - Virtual size: 5KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 6KB

ShareArr
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 1024B - Virtual size: 728B

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 408B

.pdata
Size: 1024B - Virtual size: 900B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 888B

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 160B - Virtual size: 132B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 864B - Virtual size: 848B

.reloc
Size: 736B - Virtual size: 726B

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 19KB

.pdata
Size: 1024B - Virtual size: 768B

.rsrc
Size: 4KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 39KB

.rsrc
Size: 8KB - Virtual size: 4KB