General

  • Target

    WCHISPTool_Setup.exe

  • Size

    18.6MB

  • MD5

    a390314cdb6045e974f8a6599481341f

  • SHA1

    af87a1dcfdf1fadc2949df87f461543459aa3161

  • SHA256

    f852c5b6c86eda6c3dd3bc78ab881b7deb50f996cf203cf6010431e4cbaeb896

  • SHA512

    7b1a96d8fdc06aed50c221e83fcdc656e433f13cf4ab4d1ad22e9afdf0df1cd83f5769daef8d52f3c3e7b7bc9dbb631dee3d24ae3a61fb759516916c47e14cb1

  • SSDEEP

    393216:iy9JRiOoUNneXhP+GPmLv+HpWFehfuTOu0d4Pneo5RqUMyo+Ui6e1QabFeCU:iy9zNneRP+5Lv+JgeZuTOu0d4Peo5Rqx

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

Files

  • WCHISPTool_Setup.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CH343PT.DLL
    .dll windows:5 windows x86 arch:x86

    80edd2d01f3534ba1ee05fc91b4d12a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CH375DLL.dll
    .dll windows:5 windows x86 arch:x86

    16111636875310b863bb8cb521722f07


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CH375DLL64.dll
    .dll windows:5 windows x64 arch:x64

    87385c537fa0931c5cd644e88bec9a6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CH375M64.sys
  • CH375W64.sys
    .sys windows:5 windows x64 arch:x64

    bf2fc561aaee391688a60b0ff4d04bcb


    Code Sign

    Headers

    Imports

    Sections

  • CH375WDM.CAT
  • CH375WDM.INF
  • CH375WDM.sys
    .sys windows:5 windows x86 arch:x86

    b2e5221e279b5f8de5f25a52e7d5d8a0


    Code Sign

    Headers

    Imports

    Sections

  • DRVSETUP64/DRVSETUP64.exe
    .exe windows:5 windows x64 arch:x64

    ab6db0600255af96aa098dfcef184534


    Code Sign

    Headers

    Imports

    Sections

  • Doc/WCHISPStudio_CH.pdf
    .pdf
  • Doc/WCHISPStudio_EN.pdf
    .pdf
  • SETUP.EXE
    .exe windows:4 windows x86 arch:x86

    1c185e1e0b5aec87973aa0bd127ade97


    Code Sign

    Headers

    Imports

    Sections

  • Update/IspAutoInstallToolA.exe
    .exe windows:5 windows x86 arch:x86

    84195c5dbed413287ba41be2c044faf3


    Code Sign

    Headers

    Imports

    Sections

  • Update/IspUpdateTool.exe
    .exe windows:5 windows x86 arch:x86

    ae9ee39bcdbaaf8dc6628d991cb5b8ed


    Code Sign

    Headers

    Imports

    Sections

  • Update/IspVersion.txt
  • Update/WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Update/res/status.gif
    .gif
  • WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH32Fxxx/CH343PT.DLL
    .dll windows:5 windows x86 arch:x86

    80edd2d01f3534ba1ee05fc91b4d12a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH32Fxxx/ChipType/chiplist_CH32F.wcfg
  • WCHISPTool_CH32Fxxx/Doc/WCHISPTool_CH32Fxxx_CH.pdf
    .pdf
  • WCHISPTool_CH32Fxxx/Doc/WCHISPTool_CH32Fxxx_EN.pdf
    .pdf
  • WCHISPTool_CH32Fxxx/WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH32Fxxx/WCHISPTool_CH32Fxxx.exe
    .exe windows:5 windows x86 arch:x86

    4fbce8c857e7b4e0e190bf864e784a8e


    Code Sign

    Headers

    Imports

    Sections

  • WCHISPTool_CH32Vxxx/CH343PT.DLL
    .dll windows:5 windows x86 arch:x86

    80edd2d01f3534ba1ee05fc91b4d12a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH32Vxxx/ChipType/chiplist_CH32V.wcfg
  • WCHISPTool_CH32Vxxx/Doc/WCHISPTool_CH32Vxxx_CH.pdf
    .pdf
  • WCHISPTool_CH32Vxxx/Doc/WCHISPTool_CH32Vxxx_EN.pdf
    .pdf
  • WCHISPTool_CH32Vxxx/WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH32Vxxx/WCHISPTool_CH32Vxxx.exe
    .exe windows:5 windows x86 arch:x86

    0a4ba36842da561bf8ac6a1568e64d71


    Code Sign

    Headers

    Imports

    Sections

  • WCHISPTool_CH54x-55x/ChipType/chiplist_CH54x_CH55x.wcfg
  • WCHISPTool_CH54x-55x/Doc/WCHISPTool_CH54x-55x_CH.pdf
    .pdf
  • WCHISPTool_CH54x-55x/Doc/WCHISPTool_CH54x-55x_EN.pdf
    .pdf
  • WCHISPTool_CH54x-55x/WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH54x-55x/WCHISPTool_CH54x-55x.exe
    .exe windows:5 windows x86 arch:x86

    baea1edc9a9014d65aea5298ddedc686


    Code Sign

    Headers

    Imports

    Sections

  • WCHISPTool_CH56x/ChipType/chiplist_CH56.wcfg
  • WCHISPTool_CH56x/Doc/WCHISPTool_CH56x_CH.pdf
    .pdf
  • WCHISPTool_CH56x/Doc/WCHISPTool_CH56x_EN.pdf
    .pdf
  • WCHISPTool_CH56x/WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH56x/WCHISPTool_CH56x.exe
    .exe windows:5 windows x86 arch:x86

    3e5c09c57c4b094ea5d6d36c50107ed2


    Code Sign

    Headers

    Imports

    Sections

  • WCHISPTool_CH57x-59x/ChipType/chiplist_CH57x_CH59x.wcfg
  • WCHISPTool_CH57x-59x/Doc/WCHISPTool_CH57x-59x_CH.pdf
    .pdf
  • WCHISPTool_CH57x-59x/Doc/WCHISPTool_CH57x-59x_EN.pdf
    .pdf
  • WCHISPTool_CH57x-59x/WCH55xISPDLL.dll
    .dll windows:4 windows x86 arch:x86

    66e7fe7e604648859c072093d3cc7fbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCHISPTool_CH57x-59x/WCHISPTool_CH57x-59x.exe
    .exe windows:5 windows x86 arch:x86

    e91590a55b7ef3ce5fdfc6233191cd90


    Code Sign

    Headers

    Imports

    Sections

  • WIN 1X/CH375DLL.dll
    .dll windows:5 windows x86 arch:x86

    16111636875310b863bb8cb521722f07


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WIN 1X/CH375DLL64.dll
    .dll windows:5 windows x64 arch:x64

    87385c537fa0931c5cd644e88bec9a6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WIN 1X/CH375M64.sys
  • WIN 1X/CH375W64.sys
    .sys windows:5 windows x64 arch:x64

    bf2fc561aaee391688a60b0ff4d04bcb


    Code Sign

    Headers

    Imports

    Sections

  • WIN 1X/CH375WDM.CAT
  • WIN 1X/CH375WDM.INF
  • WIN 1X/CH375WDM.sys
    .sys windows:5 windows x86 arch:x86

    b2e5221e279b5f8de5f25a52e7d5d8a0


    Code Sign

    Headers

    Imports

    Sections

  • WchIspStudio.exe
    .exe windows:5 windows x86 arch:x86

    98684a6396d40f178d63e979c83a17fc


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • uninst.exe.nsis