f:\project\wang\ch34xser\ch343ser\v160t\ch343ser_v16\objfre_wnet_AMD64\amd64\CH343S64.pdb
Static task
static1
1 signatures
General
-
Target
857039030874adb23acb5eb7fa74917cbc038443c7ed95116165bcc0a1a11e63
-
Size
65KB
-
MD5
6cf50f6b177046fe2b36241267a91ea6
-
SHA1
284b04b5fce4da820e1dbffba253e3269a73bdfb
-
SHA256
857039030874adb23acb5eb7fa74917cbc038443c7ed95116165bcc0a1a11e63
-
SHA512
63c1c7edc2c9097942b96979b646e4597a1351810e8055bb2ffcc71083110f9f0787adb2eb8bfc86354f7cc096891b6c77d281d850a9ad1f106fa5d4e4de3dee
-
SSDEEP
768:YmCgIbVAio6QfOkV/HOYB7gCr/ur73sKBOYbXMC07HuGj4of31awPCeVB6YT80:YmIbVJQWkxvBzs7ZBORT7HuG4q1PT
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 857039030874adb23acb5eb7fa74917cbc038443c7ed95116165bcc0a1a11e63
Files
-
857039030874adb23acb5eb7fa74917cbc038443c7ed95116165bcc0a1a11e63.sys windows:5 windows x64 arch:x64
d9cab79b39a9e8999fb5b48f7e8fcce2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntoskrnl.exe
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoFreeIrp
IoCancelIrp
IoAllocateIrp
ExFreePoolWithTag
ExAllocatePool
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
KeClearEvent
KeReleaseSpinLock
KeInsertQueueDpc
KeAcquireSpinLockRaiseToDpc
KeRemoveQueueDpc
KeCancelTimer
ZwQueryValueKey
RtlInitUnicodeString
RtlQueryRegistryValues
ZwClose
IoOpenDeviceRegistryKey
PsTerminateSystemThread
KeSetPriorityThread
KeDelayExecutionThread
PoRequestPowerIrp
KeSetTimer
PsCreateSystemThread
sprintf
KeSetEvent
IoGetConfigurationInformation
IoDetachDevice
IoDeleteSymbolicLink
RtlDeleteRegistryValue
RtlFreeUnicodeString
IoSetDeviceInterfaceState
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
KeWaitForMultipleObjects
IoRegisterDeviceInterface
RtlWriteRegistryValue
IoCreateSymbolicLink
KeInitializeDpc
KeInitializeTimer
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
ExReleaseFastMutex
ExAcquireFastMutex
IoFreeWorkItem
PoSetPowerState
PoCallDriver
IoWMIRegistrationControl
IoAllocateWorkItem
DbgPrint
KeBugCheckEx
IofCallDriver
PoStartNextPowerIrp
IoQueueWorkItem
IofCompleteRequest
IoDeleteDevice
RtlGetVersion
wmilib.sys
WmiSystemControl
WmiCompleteRequest
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ