PL2303_Prolific_DriverInstaller_v110[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PL2303_Prolific_DriverInstaller_v110.exe
Size 3.0MB
Sample240705-h2m98axape
SHA256 3c80fd894036f549fb831d271595df775ebaba7d98fdeea579bfae3c9d42ec53
MD5 cd31545772cdb4e84902f25d3363c58d
SHA1 88ab168cbfc19785caab11109b4682d3cfcfafae
SHA512 482be992b98efe56ed1a4cb5716d12321c5e28d144b985ad40b9d152cde47d467b052946e82ee2c3d63f7668705c6318f1d61f34eb0533b5ea358467af096d75
SSDEEP 49152:S5XjOui0/5LKqLhtbx/p/noQUhtm683Df7klWYBiCKhSOoSvbJp5+5q:ShjOp0hKqLhbpPoThM68377vBKepA4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

PL2303_Prolific_DriverInstaller_v110.exe

.exe 3.0MB

PL2303_Prolific_DriverInstaller_v110.exe

IMPHASH 8f244019e52c417786599750d44c515a
SHA256 3c80fd894036f549fb831d271595df775ebaba7d98fdeea579bfae3c9d42ec53
MD5 cd31545772cdb4e84902f25d3363c58d
SHA1 88ab168cbfc19785caab11109b4682d3cfcfafae
SHA512 482be992b98efe56ed1a4cb5716d12321c5e28d144b985ad40b9d152cde47d467b052946e82ee2c3d63f7668705c6318f1d61f34eb0533b5ea358467af096d75
SSDEEP 49152:S5XjOui0/5LKqLhtbx/p/noQUhtm683Df7klWYBiCKhSOoSvbJp5+5q:ShjOp0hKqLhbpPoThM68377vBKepA4
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

b6:27:4f:31:6a:9a:ea:e8:9a:ee:4f:41:f1:97:f3:11:d8:9e:2d:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Prolific Technology Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Prolific Technology Inc.,ST=Taipei,C=TW

Chains

Dec 2, 2009

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Timespan

Jan 29, 1996 - Aug 1, 2028

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Prolific Technology Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Prolific Technology Inc.,ST=Taipei,C=TW

Serial Number

06:89:9f:92:18:ff:e7:32:89:9b:ef:8b:6b:68:64:65

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2009 - May 7, 2010

Minor OS version

Major OS version

Entry point

139412

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

kernel32

LoadLibraryExA QueryPerformanceFrequency CreateEventA ReadFile CompareStringA CompareStringW GlobalSize SizeofResource FreeResource SearchPathA FindNextFileA GetTempFileNameA GetExitCodeProcess TerminateProcess OpenProcess GetLocalTime InitializeCriticalSection GetCurrentProcessId GetVersion LeaveCriticalSection EnterCriticalSection GetCurrentThread VirtualQuery VirtualProtect UnmapViewOfFile GetShortPathNameA MapViewOfFile CreateFileMappingA SetEvent ResetEvent QueryPerformanceCounter SystemTimeToFileTime lstrcmpA MoveFileExA GetDiskFreeSpaceA GetSystemDirectoryA GetSystemInfo IsBadReadPtr GetProcAddress GetModuleHandleA GetModuleFileNameA lstrcpyA lstrlenA Sleep CloseHandle CreateProcessA lstrlenW WideCharToMultiByte MultiByteToWideChar RemoveDirectoryA DeleteFileA ResumeThread SetThreadContext MulDiv GetPrivateProfileStringA GetPrivateProfileSectionNamesA SetEndOfFile FlushFileBuffers SetStdHandle IsBadCodePtr GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetStringTypeW GetStringTypeA SetUnhandledExceptionFilter HeapSize IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA LCMapStringW LCMapStringA GetOEMCP GetACP GetCPInfo TlsGetValue TlsAlloc CreateDirectoryA FindFirstFileA FindClose lstrcmpiA lstrcpynA WriteFile GetDriveTypeA SetFilePointer GetFileAttributesA ReleaseMutex GetPrivateProfileIntA lstrcatA LoadLibraryA GetSystemDefaultLangID CreateMutexA FreeLibrary SetErrorMode GetTickCount FindResourceExA FindResourceA LoadResource LockResource GetWindowsDirectoryA InterlockedDecrement LocalFree InterlockedIncrement FormatMessageA GetTempPathA GetVersionExA CreateFileA GlobalFree GlobalAlloc GlobalLock GlobalUnlock GetLastError SetLastError WaitForSingleObject ExitProcess GetCurrentProcess DuplicateHandle GetThreadContext VirtualProtectEx WriteProcessMemory FlushInstructionCache TlsSetValue GetCurrentThreadId GetCommandLineA GetStartupInfoA RaiseException HeapAlloc HeapFree RtlUnwind DeleteCriticalSection InterlockedExchange GetFileSize

user32

SetWindowLongA SetWindowTextA SendMessageA GetDlgItem wsprintfA WaitForInputIdle CharUpperA MessageBoxA DialogBoxIndirectParamA SetDlgItemTextA MsgWaitForMultipleObjects CharLowerBuffA SetFocus BeginPaint EndPaint LoadStringA FillRect ScreenToClient GetWindowTextLengthA GetWindowTextA GetWindowPlacement SendDlgItemMessageA GetMessageA DefWindowProcA GetParent GetWindow SystemParametersInfoA MapWindowPoints SetWindowPos GetPropA EnableMenuItem SetPropA RemovePropA ShowWindow IsWindow GetSysColor LoadImageA CreateDialogParamA GetDC ReleaseDC SetActiveWindow PeekMessageA IsDialogMessageA TranslateMessage DispatchMessageA DestroyWindow CreateDialogIndirectParamA SetForegroundWindow GetDesktopWindow GetClientRect EnableWindow IsWindowEnabled GetWindowDC UpdateWindow InvalidateRect DrawIcon MapDialogRect GetClassNameA CallWindowProcA DrawFocusRect InflateRect DrawTextA CopyRect EnumChildWindows CreateWindowExA RegisterClassExA IntersectRect GetDlgItemTextA GetWindowLongA GetWindowRect MoveWindow EndDialog LoadIconA

gdi32

CreateCompatibleBitmap CreateDCA GetStockObject GetTextExtentPoint32A CreatePatternBrush DeleteMetaFile SetMetaFileBitsEx SetStretchBltMode SelectClipRgn SetPixel PatBlt PlayMetaFile StretchBlt CreateBitmap SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx CreateDIBitmap SaveDC SetBkMode SetTextColor TextOutA RestoreDC GetTextExtentPointA CreateFontIndirectA SetBkColor CreateRectRgn DeleteObject CreateSolidBrush GetDIBColorTable GetSystemPaletteEntries CreatePalette CreateHalftonePalette GetDeviceCaps GetObjectA CreateCompatibleDC UnrealizeObject SelectPalette RealizePalette SelectObject BitBlt DeleteDC SetMapMode

advapi32

RegCloseKey RegQueryValueA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyExA RegEnumKeyA RegOpenKeyA FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken OpenThreadToken

shell32

SHGetPathFromIDListA SHGetMalloc ShellExecuteExA SHGetSpecialFolderLocation

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString SysAllocString SysAllocStringLen SysReAllocStringLen SysStringLen GetErrorInfo VariantClear VariantChangeType

lz32

LZOpenFileA LZCopy LZClose

rpcrt4

RpcStringFreeA UuidCreate UuidToStringA

Sharing

General

Malware Config

Signatures

File Explorer

PL2303_Prolific_DriverInstaller_v110.exe

PE Signature issue

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

lz32

rpcrt4

generic