AX88179_178A_Win10_v1[.]20[.]6[.]0_Drivers_Setup_v1[.]0[.]6[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0.zip
Size

8.8MB
MD5

dac7b1e35e658a1112c07530a6b79312
SHA1

8d3f616aef5d2de0fd6ee0048304e6f2b55a09fe
SHA256

631eaf839bda298930e1550d2294050638525e93ffc6cdee9b658d6d9ed73074
SHA512

4e9807870b22d0846ad243c2c765a5868b7c8f2b049932c2b6f4818c95e90627d2d6b00e5407a496a742880d6f1fd44bf17fd2dc1dab955051d9c241c442cd93
SSDEEP

196608:MVCrbaEVIk1KmkZDoCBH2qOc464ocSK3pHxGbX/PAHR5a7WD7fBe:MTe81lBH2qI0K39xGbPPAx5ND75e

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/ISSetup.dll
unpack001/AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/devcon.exe
unpack001/AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/dpinst.exe
unpack001/AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/devcon.exe
unpack001/AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/dpinst.exe

Files

AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0.zip
.zip
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0402.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0403.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0404.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0405.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0406.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0407.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0408.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0409.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x040a.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x040b.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x040c.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x040e.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0410.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0411.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0412.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0413.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0414.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0415.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0416.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0418.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0419.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x041a.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x041b.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x041d.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x041e.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x041f.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0421.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0424.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x042d.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0804.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0816.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0c0c.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/0x0c1a.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1026.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1027.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1028.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1029.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1030.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1031.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1032.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1033.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1034.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1035.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1036.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1038.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1040.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1041.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1042.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1043.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1044.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1045.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1046.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1048.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1049.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1050.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1051.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1053.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1054.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1055.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1057.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1060.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/1069.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/2052.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/2070.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/3084.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/3098.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/46.mst
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/AX88179_AX88178A Windows 10 Drivers v1.20.6.0.msi
.msi
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/ISSetup.dll
.dll regsvr32 windows:4 windows x86 arch:x86

245e35c5a8cbf9e017e45672dc1902eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msi

ord18

user32

GetDesktopWindow

gdi32

SelectClipRgn

advapi32

FreeSid

shell32

SHGetMalloc

ole32

CoTaskMemFree

oleaut32

BSTR_UserMarshal

rpcrt4

NdrInterfacePointerFree

winmm

sndPlaySoundA

comctl32

ord17

version

GetFileVersionInfoSizeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EmbeddedUIHandler
InitializeEmbeddedUI
RunISMSIMajorUpgradeRemoval
RunISMSISetup
ShutdownEmbeddedUI
f1
f10
f100
f1000
f101
f102
f103
f104
f105
f106
f107
f108
f109
f11
f110
f111
f112
f113
f114
f115
f116
f117
f118
f119
f12
f120
f121
f122
f123
f124
f125
f126
f127
f128
f129
f13
f130
f131
f132
f133
f134
f135
f136
f137
f138
f139
f14
f140
f141
f142
f143
f144
f145
f146
f147
f148
f149
f15
f150
f151
f152
f153
f154
f155
f156
f157
f158
f159
f16
f160
f161
f162
f163
f164
f165
f166
f167
f168
f169
f17
f170
f171
f172
f173
f174
f175
f176
f177
f178
f179
f18
f180
f181
f182
f183
f184
f185
f186
f187
f188
f189
f19
f190
f191
f192
f193
f194
f195
f196
f197
f198
f199
f2
f20
f200
f201
f202
f203
f204
f205
f206
f207
f208
f209
f21
f210
f211
f212
f213
f214
f215
f216
f217
f218
f219
f22
f220
f221
f222
f223
f224
f225
f226
f227
f228
f229
f23
f230
f231
f232
f233
f234
f235
f236
f237
f238
f239
f24
f240
f241
f242
f243
f244
f245
f246
f247
f248
f249
f25
f250
f251
f252
f253
f254
f255
f256
f257
f258
f259
f26
f260
f261
f262
f263
f264
f265
f266
f267
f268
f269
f27
f270
f271
f272
f273
f274
f275
f276
f277
f278
f279
f28
f280
f281
f282
f283
f284
f285
f286
f287
f288
f289
f29
f290
f291
f292
f293
f294
f295
f296
f297
f298
f299
f3
f30
f300
f301
f302
f303
f304
f305
f306
f307
f308
f309
f31
f310
f311
f312
f313
f314
f315
f316
f317
f318
f319
f32
f320
f321
f322
f323
f324
f325
f326
f327
f328
f329
f33
f330
f331
f332
f333
f334
f335
f336
f337
f338
f339
f34
f340
f341
f342
f343
f344
f345
f346
f347
f348
f349
f35
f350
f351
f352
f353
f354
f355
f356
f357
f358
f359
f36
f360
f361
f362
f363
f364
f365
f366
f367
f368
f369
f37
f370
f371
f372
f373
f374
f375
f376
f377
f378
f379
f38
f380
f381
f382
f383
f384
f385
f386
f387
f388
f389
f39
f390
f391
f392
f393
f394
f395
f396
f397
f398
f399
f4
f40
f400
f401
f402
f403
f404
f405
f406
f407
f408
f409
f41
f410
f411
f412
f413
f414
f415
f416
f417
f418
f419
f42
f420
f421
f422
f423
f424
f425
f426
f427
f428
f429
f43
f430
f431
f432
f433
f434
f435
f436
f437
f438
f439
f44
f440
f441
f442
f443
f444
f445
f446
f447
f448
f449
f45
f450
f451
f452
f453
f454
f455
f456
f457
f458
f459
f46
f460
f461
f462
f463
f464
f465
f466
f467
f468
f469
f47
f470
f471
f472
f473
f474
f475
f476
f477
f478
f479
f48
f480
f481
f482
f483
f484
f485
f486
f487
f488
f489
f49
f490
f491
f492
f493
f494
f495
f496
f497
f498
f499
f5
f50
f500
f501
f502
f503
f504
f505
f506
f507
f508
f509
f51
f510
f511
f512
f513
f514
f515
f516
f517
f518
f519
f52
f520
f521
f522
f523
f524
f525
f526
f527
f528
f529
f53
f530
f531
f532
f533
f534
f535
f536
f537
f538
f539
f54

Sections

.text
Size: 441KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/Setup.ini
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/Silent_install.bat
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/history.txt
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/instmsiw.exe
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:06:2a:8d:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/03/2001, 21:27

Not After

29/05/2002, 21:37

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2001 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/NETAX88179_178a.inf
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/ax88179_178a.cat
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/ax88179_178a.sys
.sys windows:10 windows x86 arch:x86

427d22013847c5e858e20e2425e68727

Code Sign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/09/2018, 19:45

Not After

20/09/2019, 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:80:f1:6c:33:d8:6a:9f:ef:25:d3:a7:85:7e:ee:25:1d:15:26:09:7e:28:85:49:8d:3e:44:17:b5:ed:5b:37
Signer

Actual PE Digest

a1:80:f1:6c:33:d8:6a:9f:ef:25:d3:a7:85:7e:ee:25:1d:15:26:09:7e:28:85:49:8d:3e:44:17:b5:ed:5b:37

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_vsnwprintf
MmMapLockedPagesSpecifyCache
MmSizeOfMdl
MmUnmapLockedPages
MmBuildMdlForNonPagedPool
IofCompleteRequest
ExGetFirmwareEnvironmentVariable
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
memset
memcpy
RtlInitUnicodeString
RtlRandomEx
ZwQueryValueKey
ZwOpenKey
ZwClose
IoGetDeviceProperty
RtlCopyUnicodeString
ExFreePoolWithTag
ExAllocatePool
KeQuerySystemTimePrecise
KeInitializeSpinLock

hal

KeStallExecutionProcessor
KeGetCurrentIrql
KfReleaseSpinLock
WRITE_PORT_ULONG
READ_PORT_ULONG
KfAcquireSpinLock

ndis.sys

NdisSetTimerObject
NdisSetEvent
NdisMOidRequestComplete
NdisMIndicateReceiveNetBufferLists
NdisMPauseComplete
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisCancelTimerObject
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisMSendNetBufferListsComplete
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisFreeTimerObject
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisMSetMiniportAttributes
NdisMIndicateStatusEx
NdisMSleep
NdisGetDeviceReservedExtension
NdisReadConfiguration
NdisWriteConfiguration
NdisCloseConfiguration
NdisReadNetworkAddress
NdisFreeMemory
NdisInitializeEvent
NdisResetEvent
NdisAllocateTimerObject
NdisGetVersion
NdisOpenConfigurationEx
NdisAllocateMemoryWithTagPriority
NdisSetOptionalHandlers
NdisMGetDeviceProperty

usbd.sys

USBD_GetUSBDIVersion

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/devcon.exe
.exe windows:10 windows x86 arch:x86

3b302c16d4b2b86b0b32dd6579099d94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep

msvcrt

_except_handler4_common
_controlfp
?terminate@@YAXXZ
_initterm
__setusermatherr
__p__fmode
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
memset
_callnewh
malloc
free
__iob_func
_cexit
_XcptFilter
wprintf
towupper
fputws
iswalpha
wcsrchr
fputs
_wcsnicmp
towlower
_wcsicmp
wcschr

ole32

CLSIDFromString

setupapi

SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
SetupScanFileQueueW
CM_Get_Next_Res_Des_Ex
CM_Get_Device_ID_ExW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiCreateDeviceInfoListExW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiClassGuidsFromNameExW
SetupDiGetClassDescriptionExW
SetupDiGetDriverInfoDetailW
SetupFindFirstLineW
SetupDiSetDeviceInstallParamsW
CM_Get_First_Log_Conf_Ex
CM_Free_Res_Des_Handle
SetupOpenInfFileW
SetupDiDestroyDriverInfoList
SetupDiCallClassInstaller
SetupOpenFileQueue
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
CM_Get_Res_Des_Data_Ex
SetupDiGetDriverInstallParamsW
SetupCloseFileQueue

user32

CharNextW
CharPrevW
LoadStringW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/32-bit/dpinst.exe
.exe windows:6 windows x86 arch:x86

3ab7cc62e4963955ad408cd420cd8ef1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
IsTextUnicode
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
SetEntriesInAclW
DeleteService
StartServiceW
ControlService
OpenSCManagerW
CloseServiceHandle
OpenServiceW
QueryServiceStatus
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetFileAttributesW
DeleteFileW
ReleaseMutex
SetFilePointer
HeapFree
GetProcessHeap
HeapAlloc
CreateMutexW
FreeConsole
SetConsoleMode
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FreeLibrary
FillConsoleOutputCharacterW
ReadConsoleOutputW
GetConsoleMode
GetStdHandle
GetProcAddress
LoadLibraryW
WriteConsoleW
IsValidLocale
lstrlenW
lstrcmpW
CompareStringW
GetTempFileNameW
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
SetFileAttributesW
FormatMessageW
RaiseException
GetFileSize
CreateFileMappingW
MapViewOfFile
WriteConsoleOutputW
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
CreateFileW
WriteFile
CreateThread
WaitForMultipleObjectsEx
InterlockedCompareExchange
WaitForSingleObjectEx
SetEvent
CreateEventW
GetExitCodeProcess
DeviceIoControl
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
RemoveDirectoryW
GetCurrentDirectoryW
GetShortPathNameW
GetFullPathNameW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
MoveFileExW
SearchPathW
GetSystemDefaultUILanguage
LoadLibraryExW
CreateFileA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleCP
GetLocaleInfoA
Sleep
LoadLibraryExA
ReadFile
LCMapStringW
LCMapStringA
GetThreadLocale
SetThreadLocale
GetUserDefaultUILanguage
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
GetModuleFileNameW
SetCurrentDirectoryW
WaitForSingleObject
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
GetStartupInfoW
GetEnvironmentVariableW
lstrcmpiW
WideCharToMultiByte
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetCommandLineW
LocalAlloc
GlobalFree
LocalFree
MultiByteToWideChar
GetCurrentProcess
GetLastError
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
EnumResourceLanguagesW
LocalReAlloc
EnterCriticalSection

gdi32

SetLayout
DeleteDC
GetObjectW
CreateCompatibleBitmap
CreateBitmap
SelectObject
StartPage
EndPage
StartDocW
EndDoc
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW
DeleteObject
CreateCompatibleDC

user32

AllowSetForegroundWindow
DefWindowProcW
PostQuitMessage
GetUserObjectInformationW
GetProcessWindowStation
GetIconInfo
DrawIconEx
CreateIconIndirect
LoadIconW
LoadBitmapW
DrawTextExW
LoadImageW
GetSystemMetrics
GetSysColor
DestroyWindow
GetWindowLongW
SendDlgItemMessageW
InvalidateRect
SystemParametersInfoW
GetDC
ReleaseDC
SetWindowLongW
SetWindowTextW
GetParent
PostMessageW
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
DestroyIcon
DialogBoxParamW
SetDlgItemTextW
CharLowerW
GetDlgItem
SendMessageW
MessageBoxW
RegisterClassExW
CreateWindowExW
ShowWindow
UnregisterClassA
EndDialog

ntdll

RtlNtStatusToDosError
NtOpenThreadToken
NtQueryInformationToken
NtOpenProcessToken
RtlUnwind
NtClose

shell32

SHGetFolderPathW
ShellExecuteExW
ord59
CommandLineToArgvW

setupapi

SetupDiClassNameFromGuidW
SetupDiOpenClassRegKey
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupFindNextLine
SetupFindNextMatchLineW
SetupOpenInfFileW
SetupGetLineCountW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
pSetupSetGlobalFlags
pSetupGetGlobalFlags
SetupGetFieldCount
SetupGetIntField
SetupOpenAppendInfFileW
SetupDiSetClassInstallParamsW
SetupDiGetClassDevsW
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
CM_Enumerate_Classes
CM_Get_DevNode_Status
SetupDiCreateDeviceInfoList
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyW
SetupGetTargetPathW
SetupQueueCopyIndirectW
SetupQueueCopyW
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupCopyOEMInfW
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Setup_DevNode
SetupDiEnumDeviceInfo
CMP_WaitNoPendingInstallEvents
CM_Query_And_Remove_SubTreeW

wintrust

WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle

ole32

CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SysFreeString

comctl32

CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_SetBkColor
PropertySheetW
ImageList_Create

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCertificateContext
CertFreeCTLContext
CertGetCTLContextProperty
CryptQueryObject

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 471KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/NETAX88179_178a.inf
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/ax88179_178a.cat
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/ax88179_178a.sys
.sys windows:10 windows x64 arch:x64

a7a4e8b656500138e014333a50d0634e

Code Sign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/09/2018, 19:45

Not After

20/09/2019, 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:b5:26:8e:88:f1:2b:6d:19:9b:a2:23:8c:1c:7d:ad:03:87:3e:8b:a7:ae:37:b7:97:7e:2b:0f:4e:e6:b3:9c
Signer

Actual PE Digest

40:b5:26:8e:88:f1:2b:6d:19:9b:a2:23:8c:1c:7d:ad:03:87:3e:8b:a7:ae:37:b7:97:7e:2b:0f:4e:e6:b3:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwQueryValueKey
MmMapLockedPagesSpecifyCache
MmSizeOfMdl
MmUnmapLockedPages
MmBuildMdlForNonPagedPool
IofCompleteRequest
ExGetFirmwareEnvironmentVariable
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
_vsnwprintf
RtlRandomEx
RtlInitUnicodeString
ZwOpenKey
ZwClose
IoGetDeviceProperty
ExFreePoolWithTag
ExAllocatePool
RtlCopyUnicodeString
KeQuerySystemTimePrecise
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock

hal

KeStallExecutionProcessor

ndis.sys

NdisMSleep
NdisMIndicateStatusEx
NdisMSetMiniportAttributes
NdisAllocateNetBufferListPool
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetEvent
NdisMOidRequestComplete
NdisMIndicateReceiveNetBufferLists
NdisMGetDeviceProperty
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisGetDeviceReservedExtension
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisMSendNetBufferListsComplete
NdisMDeregisterMiniportDriver
NdisMPauseComplete
NdisAllocateMemoryWithTagPriority
NdisReadConfiguration
NdisWriteConfiguration
NdisCloseConfiguration
NdisReadNetworkAddress
NdisFreeMemory
NdisInitializeEvent
NdisResetEvent
NdisWaitEvent
NdisGetVersion
NdisOpenConfigurationEx
NdisSetTimerObject
NdisSetOptionalHandlers
NdisAllocateTimerObject
NdisMRegisterMiniportDriver

usbd.sys

USBD_GetUSBDIVersion

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/devcon.exe
.exe windows:10 windows x64 arch:x64

4e103e12a556650a62d353114d81142e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
GetModuleHandleW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter

msvcrt

towupper
__iob_func
?terminate@@YAXXZ
_commode
_fmode
__C_specific_handler
fputws
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
_callnewh
malloc
free
iswalpha
memset
_initterm
wcsrchr
fputs
_wcsnicmp
towlower
_wcsicmp
wcschr
wprintf

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

ole32

CLSIDFromString

setupapi

SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
SetupScanFileQueueW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
CM_Get_Device_ID_ExW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiCreateDeviceInfoListExW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiClassGuidsFromNameExW
SetupDiGetClassDescriptionExW
SetupDiGetDriverInfoDetailW
SetupFindFirstLineW
SetupDiSetDeviceInstallParamsW
CM_Get_First_Log_Conf_Ex
CM_Free_Res_Des_Handle
SetupOpenInfFileW
SetupDiDestroyDriverInfoList
SetupDiCallClassInstaller
SetupOpenFileQueue
SetupCloseInfFile
SetupDiOpenClassRegKeyExW

user32

CharNextW
CharPrevW
LoadStringW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/program files/ASIX/AX88179_178A_Win10_8.x_Drivers/64-bit/dpinst.exe
.exe windows:6 windows x64 arch:x64

3eacb9638877275335da4b58e52824f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
IsTextUnicode
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclW
DeleteService
CloseServiceHandle
ControlService
StartServiceW
OpenServiceW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenSCManagerW
QueryServiceStatus
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
CheckTokenMembership

kernel32

CreateMutexW
ReleaseMutex
SetFilePointer
HeapAlloc
GetProcessHeap
HeapFree
LoadLibraryW
GetProcAddress
GetStdHandle
GetConsoleMode
SetConsoleMode
ReadConsoleOutputW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
FreeConsole
FreeLibrary
WriteConsoleOutputW
WriteConsoleW
IsValidLocale
VirtualProtect
Sleep
GetFileAttributesW
DeleteFileW
FormatMessageW
RaiseException
CopyFileW
SetFileAttributesW
GetTempFileNameW
FindClose
FindNextFileW
CompareStringW
lstrcmpW
FindFirstFileW
lstrlenW
UnmapViewOfFile
GetConsoleScreenBufferInfo
CreateFileMappingW
LCMapStringW
WaitForMultipleObjectsEx
WaitForSingleObjectEx
SetEndOfFile
CreateEventW
SetEvent
LocalReAlloc
DeviceIoControl
VerifyVersionInfoW
VerSetConditionMask
GetSystemDirectoryW
GetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetShortPathNameW
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
GetFullPathNameW
SetLastError
GetLocaleInfoW
LoadLibraryExW
GetSystemDefaultUILanguage
SearchPathW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
OutputDebugStringA
GetStartupInfoW
GetEnvironmentVariableW
lstrcmpiW
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
GetFileSize
CreateThread
SetThreadLocale
GetThreadLocale
WriteFile
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetCurrentProcess
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
SetCurrentDirectoryW
GetUserDefaultUILanguage
EnumResourceLanguagesW
GetModuleFileNameW
GetExitCodeProcess
WaitForSingleObject
LocalFree
GlobalFree
LocalAlloc
GetLastError
GetCommandLineW
CloseHandle
MapViewOfFile

gdi32

CreateBitmap
CreateCompatibleBitmap
GetObjectW
DeleteDC
SetLayout
CreateCompatibleDC
EndPage
StartPage
EndDoc
StartDocW
GetTextMetricsW
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject

user32

DestroyIcon
CreateIconIndirect
DrawIconEx
GetIconInfo
LoadIconW
LoadBitmapW
CharLowerW
UnregisterClassA
PostQuitMessage
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
AllowSetForegroundWindow
DialogBoxParamW
SetDlgItemTextW
EndDialog
MessageBoxW
GetDlgItem
SendMessageW
GetProcessWindowStation
GetUserObjectInformationW
LoadImageW
SetWindowTextW
PostMessageW
GetParent
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
SendDlgItemMessageW
InvalidateRect
GetSystemMetrics
GetSysColor
DestroyWindow
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
DrawTextExW

msvcrt

_wcmdln
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
_resetstkoflw
__C_specific_handler
memset
_wcsupr
_wcslwr
_errno
__CxxFrameHandler
fread
_initterm
fclose
fwprintf
_wfopen
realloc
??2@YAPEAX_K@Z
wcsstr
_wcsicmp
_wtol
_vscwprintf
free
malloc
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
memcpy
memmove
_CxxThrowException
mbtowc
__mb_cur_max
isleadbyte
_iob
_snprintf
_itoa
ferror
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
_wcsnicmp
_vsnwprintf
wcsncmp
bsearch
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
iswalpha
??_U@YAPEAX_K@Z
wcschr
wcspbrk
wcsrchr
iswdigit
feof
memcmp

ntdll

NtQueryInformationToken
RtlNtStatusToDosError
NtClose
NtOpenThreadToken
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtOpenProcessToken

shell32

ord59
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
pSetupSetGlobalFlags
SetupDefaultQueueCallbackW
pSetupGetGlobalFlags
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupGetFieldCount
SetupGetIntField
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupFindNextLine
SetupInstallServicesFromInfSectionW
SetupInstallFromInfSectionW
SetupPromptReboot
SetupDiGetDeviceInstanceIdW
SetupFindFirstLineW
SetupOpenAppendInfFileW
SetupGetLineCountW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupOpenInfFileW
SetupDiGetSelectedDriverW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupQueueCopyW
CMP_WaitNoPendingInstallEvents
SetupCloseFileQueue
SetupOpenFileQueue
SetupDiGetDriverInfoDetailW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupInstallFilesFromInfSectionW
SetupDiCallClassInstaller
SetupDiClassNameFromGuidW
SetupDiOpenClassRegKey
CM_Enumerate_Classes
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
CM_Query_And_Remove_SubTreeW
CM_Setup_DevNode
CM_Get_Device_IDW
SetupCopyOEMInfW
SetupGetTargetPathW

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString
VariantChangeType

comctl32

PropertySheetW
CreatePropertySheetPageW
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCTLContext
CertFreeCertificateContext
CertGetCTLContextProperty
CryptQueryObject

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 510KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 471KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AX88179_178A_Win10_v1.20.6.0_Drivers_Setup_v1.0.6.0/setup.exe
.exe windows:4 windows x86 arch:x86

d0d2ccf14d8b26619175981fe98390e7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:8c:d4:3f:fc:83:55:e1:4e:18:44:83:1d:66:c6:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

05/03/2019, 00:00

Not After

05/03/2022, 23:59

Subject

CN=ASIX Electronics Corp.,O=ASIX Electronics Corp.,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:65:85:68:2a:e2:33:82:5f:9f:90:6a:23:90:76:59:d9:ac:86:a7
Signer

Actual PE Digest

75:65:85:68:2a:e2:33:82:5f:9f:90:6a:23:90:76:59:d9:ac:86:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shell32

SHGetSpecialFolderLocation
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA

comctl32

ord17

kernel32

CompareStringA
CompareStringW
GetVersionExA
LoadLibraryA
FreeLibrary
GetProcAddress
GetSystemDefaultLangID
lstrcmpA
lstrcmpiA
VerLanguageNameA
MoveFileA
FindClose
FindNextFileA
CompareFileTime
FindFirstFileA
GetSystemTimeAsFileTime
SetFileAttributesA
GetPrivateProfileStringA
CreateDirectoryA
LocalFree
FormatMessageA
GetSystemInfo
MulDiv
IsValidLocale
GetVersion
GetModuleHandleA
GetFileAttributesA
IsBadReadPtr
VirtualQuery
FlushFileBuffers
SetEndOfFile
GetDiskFreeSpaceA
GetDriveTypeA
GetExitCodeProcess
GetCurrentThread
GetTempFileNameA
lstrcatA
CreateEventA
QueryPerformanceFrequency
InterlockedDecrement
InterlockedIncrement
CopyFileA
CreateThread
GetExitCodeThread
GetTickCount
GlobalFree
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
ExpandEnvironmentStringsA
GetTempPathA
SetErrorMode
GetWindowsDirectoryA
lstrcpyA
GetSystemDirectoryA
SetEnvironmentVariableA
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
SetConsoleCtrlHandler
IsBadCodePtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
FatalAppExitA
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
SetCurrentDirectoryA
CreateProcessA
WaitForSingleObject
ExitProcess
GetCurrentProcess
DuplicateHandle
GetThreadContext
VirtualProtectEx
WriteProcessMemory
FlushInstructionCache
GetShortPathNameA
SetThreadContext
ResumeThread
DeleteFileA
Sleep
RemoveDirectoryA
IsDBCSLeadByte
SetFilePointer
GetProcessHeap
HeapAlloc
ReadFile
lstrlenW
HeapFree
WriteFile
lstrcpynA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
lstrlenA
GetLastError
SetLastError
WritePrivateProfileSectionA
GetPrivateProfileSectionA
MoveFileExA
GetLocaleInfoA
RtlUnwind
FreeResource
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
SystemTimeToFileTime
QueryPerformanceCounter
SetEvent
ResetEvent
SearchPathA
VirtualProtect
GetCurrentProcessId
FindResourceExA
LoadLibraryExA
GetDateFormatA
GetTimeFormatA
GetLocalTime
TerminateProcess
GetProcessTimes
OpenProcess
GetCurrentDirectoryA
LeaveCriticalSection
DeleteCriticalSection
LocalAlloc
InterlockedExchange
RaiseException
EnterCriticalSection
InitializeCriticalSection

user32

wvsprintfA
MoveWindow
LoadImageA
CreateDialogParamA
SetCursor
GetWindow
GetDlgItemTextA
SetFocus
EnableWindow
MessageBoxA
SetDlgItemTextA
SetForegroundWindow
SetActiveWindow
GetDlgCtrlID
GetDC
FillRect
GetSysColor
GetSysColorBrush
IsDialogMessageA
SendMessageA
GetWindowRect
GetSystemMetrics
SetRect
FindWindowA
IntersectRect
SubtractRect
IsWindow
DestroyWindow
CreateDialogIndirectParamA
CharPrevA
WaitForInputIdle
GetWindowLongA
BeginPaint
EndPaint
SetWindowLongA
GetClientRect
ClientToScreen
SetWindowPos
ExitWindowsEx
CharUpperA
UpdateWindow
InvalidateRect
SetPropA
DrawIcon
MapDialogRect
GetClassNameA
CallWindowProcA
RemovePropA
GetPropA
DrawFocusRect
InflateRect
DrawTextA
GetWindowTextA
CopyRect
EnumChildWindows
MapWindowPoints
ScreenToClient
GetWindowDC
ReleaseDC
EndDialog
SetWindowTextA
GetDlgItem
ShowWindow
DialogBoxIndirectParamA
GetDesktopWindow
wsprintfA
MsgWaitForMultipleObjects
PeekMessageA
DefWindowProcA
PostMessageA
KillTimer
PostQuitMessage
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
SendDlgItemMessageA
CharNextA

gdi32

UnrealizeObject
SelectPalette
RealizePalette
TranslateCharsetInfo
GetSystemPaletteEntries
CreatePalette
CreateHalftonePalette
CreateFontA
GetDIBColorTable
SetTextColor
GetDeviceCaps
CreateFontIndirectA
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateDIBitmap
DeleteObject
GetStockObject
CreateCompatibleBitmap
CreateDCA
RestoreDC
GetTextExtentPoint32A
SaveDC
CreatePatternBrush
SetMetaFileBitsEx
SetStretchBltMode
SelectClipRgn
CreateRectRgn
SetPixel
PatBlt
PlayMetaFile
SetBkColor
StretchBlt
CreateBitmap
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
SetBkMode
GetObjectA

advapi32

OpenThreadToken
OpenProcessToken
GetTokenInformation
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
AllocateAndInitializeSid
EqualSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegEnumValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

StringFromCLSID
CoCreateInstance
CLSIDFromProgID
ProgIDFromCLSID
CoTaskMemFree
CoInitializeSecurity
CoUninitialize
CoInitialize
CoCreateGuid
CreateItemMoniker
StringFromGUID2
GetRunningObjectTable

oleaut32

SysFreeString
LoadTypeLi
GetErrorInfo
VariantChangeType
VariantClear
SysAllocString
SysStringLen
SysReAllocStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
RegisterTypeLi

rpcrt4

UuidFromStringA
UuidCreate
UuidToStringA
RpcStringFreeA

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

245e35c5a8cbf9e017e45672dc1902eb

Headers

File Characteristics

Imports

kernel32

msi

user32

gdi32

advapi32

shell32

ole32

oleaut32

rpcrt4

winmm

comctl32

version

Exports

Exports

Sections

.text Size: 441KB - Virtual size: 1.6MB

.rsrc Size: 143KB - Virtual size: 144KB

.reloc Size: 512B - Virtual size: 4KB

1494de9b53e05fc1f40cb92afbdd6ce4

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:06:2a:8d:00:00:00:00:00:0bCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comctl32

version

Sections

.text Size: 33KB - Virtual size: 33KB

.data Size: 1024B - Virtual size: 6KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

427d22013847c5e858e20e2425e68727

Code Sign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6dCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

a1:80:f1:6c:33:d8:6a:9f:ef:25:d3:a7:85:7e:ee:25:1d:15:26:09:7e:28:85:49:8d:3e:44:17:b5:ed:5b:37Signer

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

ndis.sys

usbd.sys

wdfldr.sys

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 900B

PAGE Size: 11KB - Virtual size: 10KB

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

3b302c16d4b2b86b0b32dd6579099d94

.text
Size: 441KB - Virtual size: 1.6MB

.rsrc
Size: 143KB - Virtual size: 144KB

.reloc
Size: 512B - Virtual size: 4KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:06:2a:8d:00:00:00:00:00:0b
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

.text
Size: 33KB - Virtual size: 33KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

a1:80:f1:6c:33:d8:6a:9f:ef:25:d3:a7:85:7e:ee:25:1d:15:26:09:7e:28:85:49:8d:3e:44:17:b5:ed:5b:37
Signer

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 900B

PAGE
Size: 11KB - Virtual size: 10KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 392KB - Virtual size: 391KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 471KB - Virtual size: 471KB

.reloc
Size: 24KB - Virtual size: 23KB

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

40:b5:26:8e:88:f1:2b:6d:19:9b:a2:23:8c:1c:7d:ad:03:87:3e:8b:a7:ae:37:b7:97:7e:2b:0f:4e:e6:b3:9c
Signer

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1KB - Virtual size: 1KB

PAGE
Size: 11KB - Virtual size: 11KB

INIT
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 40B