CH341CloseDevice
CH341EppReadData
CH341EppWriteData
CH341GetInput
CH341OpenDevice
CH341ResetDevice
CH341SetDeviceNotify
CH341SetIntRoutine
CH341SetParaMode
Static task
static1
Behavioral task
behavioral1
Sample
f20b038a940a04f92589a016a1d3bc267c2eac9ed4bffe382879079d0b00558d.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f20b038a940a04f92589a016a1d3bc267c2eac9ed4bffe382879079d0b00558d.dll
Resource
win10v2004-20241007-en
Target
f20b038a940a04f92589a016a1d3bc267c2eac9ed4bffe382879079d0b00558d
Size
14KB
MD5
045dd7a83154779c05c417af8cc19444
SHA1
4c15f1a12a70b9408025006e480ed1450c4633d0
SHA256
f20b038a940a04f92589a016a1d3bc267c2eac9ed4bffe382879079d0b00558d
SHA512
16847c1cbe2263cf35cf4bfb734b2b24f15425571071f4af17543be98d8a2c26c7f452d08250644b0de2eaf8a2ba6fd78dee148a19562721284212d77c83c119
SSDEEP
192:nm/K/17RmdxKLAje2GkRijCiN/SPue1qx+BViMUzrEtjIhXRfhBxf1SZQ34fY2eZ:r8PaAjUjCiNCnqxtMUMjIhRhcPzEA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
f20b038a940a04f92589a016a1d3bc267c2eac9ed4bffe382879079d0b00558d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CH341CloseDevice
CH341EppReadData
CH341EppWriteData
CH341GetInput
CH341OpenDevice
CH341ResetDevice
CH341SetDeviceNotify
CH341SetIntRoutine
CH341SetParaMode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE