f:\project\wang\ch34xser\ch343ser\v160t\ch343ser_v16\objfre_wnet_AMD64\amd64\CH343S64.pdb
Static task
static1
1 signatures
General
-
Target
72e2a03fcdf4e4881b96721e4202b79dd947c5dc8fff6e3c14d5dc771b093f81
-
Size
65KB
-
MD5
6d4cb5556e41db7eeb7d502b9fe75e3f
-
SHA1
fe634ebf176d9fa4fc6abff4330d85428b81c5df
-
SHA256
72e2a03fcdf4e4881b96721e4202b79dd947c5dc8fff6e3c14d5dc771b093f81
-
SHA512
d6c15667030758b64c5a149b48cec33cb526011f8e6dc873fce7f46ba650e3f12b4c64325e76d6c03568df0c720cb379943ee240ea3a74380224022ded531ecc
-
SSDEEP
768:YdCgIbVAio6QfOkV/HOYB7gCr/ur73sKBOYbXMC07HuGj4of31awPCeVB6YT80:YPIbVJQWkxvBzs7ZBORT7HuG4q1PT
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e2a03fcdf4e4881b96721e4202b79dd947c5dc8fff6e3c14d5dc771b093f81
Files
-
72e2a03fcdf4e4881b96721e4202b79dd947c5dc8fff6e3c14d5dc771b093f81.sys windows:5 windows x64 arch:x64
d9cab79b39a9e8999fb5b48f7e8fcce2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntoskrnl.exe
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoFreeIrp
IoCancelIrp
IoAllocateIrp
ExFreePoolWithTag
ExAllocatePool
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
KeClearEvent
KeReleaseSpinLock
KeInsertQueueDpc
KeAcquireSpinLockRaiseToDpc
KeRemoveQueueDpc
KeCancelTimer
ZwQueryValueKey
RtlInitUnicodeString
RtlQueryRegistryValues
ZwClose
IoOpenDeviceRegistryKey
PsTerminateSystemThread
KeSetPriorityThread
KeDelayExecutionThread
PoRequestPowerIrp
KeSetTimer
PsCreateSystemThread
sprintf
KeSetEvent
IoGetConfigurationInformation
IoDetachDevice
IoDeleteSymbolicLink
RtlDeleteRegistryValue
RtlFreeUnicodeString
IoSetDeviceInterfaceState
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
KeWaitForMultipleObjects
IoRegisterDeviceInterface
RtlWriteRegistryValue
IoCreateSymbolicLink
KeInitializeDpc
KeInitializeTimer
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
ExReleaseFastMutex
ExAcquireFastMutex
IoFreeWorkItem
PoSetPowerState
PoCallDriver
IoWMIRegistrationControl
IoAllocateWorkItem
DbgPrint
KeBugCheckEx
IofCallDriver
PoStartNextPowerIrp
IoQueueWorkItem
IofCompleteRequest
IoDeleteDevice
RtlGetVersion
wmilib.sys
WmiSystemControl
WmiCompleteRequest
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ