PL2303_Prolific_DriverInstaller_v1[.]10[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PL2303_Prolific_DriverInstaller_v1.10.0.exe
Size 3.1MB
Sample260729-kr7bfsstcs
SHA256 65a40058b09ec2f62c936406fa9f0bfafd765f3e072edec272cf789959fb216b
MD5 2c5e5e7f0149c2dc3a708eb7697c8c32
SHA1 00a8ee573f78ae624b344d1ee6fd85a1dae32fb2
SHA512 5429f8b1b9652360b9eb61743125af0878fcaef6ffdd2218aa2b3dfe98f8a08889f3737414e3c1c3ebffd8618593cb41b2b0cccb04fcddc024cca03cdceac15c
SSDEEP 49152:p50jOuiL/5LKqLhtbx/p/noQLhtT6/83Dfs5oWYBiCKhSOoSvbJU5s:pWjOpLhKqLhbpPoKhl6/837cPBKeUy
TLSH
T1B4E5E142BBEA816EF2B74A70E97B07B15BB5BC969E31811F7380B91C1C306A1D531B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
PL2303_Prolific_DriverInstaller_v1.10.0.exe

File Explorer

PL2303_Prolific_DriverInstaller_v1.10.0.exe

.exe 3.1MB

PL2303_Prolific_DriverInstaller_v1.10.0.exe

IMPHASH 8f244019e52c417786599750d44c515a
SHA256 65a40058b09ec2f62c936406fa9f0bfafd765f3e072edec272cf789959fb216b
MD5 2c5e5e7f0149c2dc3a708eb7697c8c32
SHA1 00a8ee573f78ae624b344d1ee6fd85a1dae32fb2
SHA512 5429f8b1b9652360b9eb61743125af0878fcaef6ffdd2218aa2b3dfe98f8a08889f3737414e3c1c3ebffd8618593cb41b2b0cccb04fcddc024cca03cdceac15c
SSDEEP 49152:p50jOuiL/5LKqLhtbx/p/noQLhtT6/83Dfs5oWYBiCKhSOoSvbJU5s:pWjOpLhKqLhbpPoKhl6/837cPBKeUy
TLSH
T1B4E5E142BBEA816EF2B74A70E97B07B15BB5BC969E31811F7380B91C1C306A1D531B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1c:24:a6:8e:45:c5:1c:6a:74:d9:5c:18:4b:be:84:bf:12:ab:f7:2d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Prolific Technology Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Prolific Technology Inc.,L=Taipei,ST=Taiwan,C=TW

Chains

Sep 25, 2014

CN=Prolific Technology Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Prolific Technology Inc.,L=Taipei,ST=Taiwan,C=TW

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 8, 2006 - Jul 16, 2036

Subject

CN=Prolific Technology Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Prolific Technology Inc.,L=Taipei,ST=Taiwan,C=TW

Serial Number

26:66:5b:15:c4:23:2c:3b:af:35:b2:7f:11:96:69:79

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 9, 2014 - Jun 7, 2016

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

139412

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

kernel32

LoadLibraryExA QueryPerformanceFrequency CreateEventA ReadFile CompareStringA CompareStringW GlobalSize SizeofResource FreeResource SearchPathA FindNextFileA GetTempFileNameA GetExitCodeProcess TerminateProcess OpenProcess GetLocalTime InitializeCriticalSection GetCurrentProcessId GetVersion LeaveCriticalSection EnterCriticalSection GetCurrentThread VirtualQuery VirtualProtect UnmapViewOfFile GetShortPathNameA MapViewOfFile CreateFileMappingA SetEvent ResetEvent QueryPerformanceCounter SystemTimeToFileTime lstrcmpA MoveFileExA GetDiskFreeSpaceA GetSystemDirectoryA GetSystemInfo IsBadReadPtr GetProcAddress GetModuleHandleA GetModuleFileNameA lstrcpyA lstrlenA Sleep CloseHandle CreateProcessA lstrlenW WideCharToMultiByte MultiByteToWideChar RemoveDirectoryA DeleteFileA ResumeThread SetThreadContext MulDiv GetPrivateProfileStringA GetPrivateProfileSectionNamesA SetEndOfFile FlushFileBuffers SetStdHandle IsBadCodePtr GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetStringTypeW GetStringTypeA SetUnhandledExceptionFilter HeapSize IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA LCMapStringW LCMapStringA GetOEMCP GetACP GetCPInfo TlsGetValue TlsAlloc CreateDirectoryA FindFirstFileA FindClose lstrcmpiA lstrcpynA WriteFile GetDriveTypeA SetFilePointer GetFileAttributesA ReleaseMutex GetPrivateProfileIntA lstrcatA LoadLibraryA GetSystemDefaultLangID CreateMutexA FreeLibrary SetErrorMode GetTickCount FindResourceExA FindResourceA LoadResource LockResource GetWindowsDirectoryA InterlockedDecrement LocalFree InterlockedIncrement FormatMessageA GetTempPathA GetVersionExA CreateFileA GlobalFree GlobalAlloc GlobalLock GlobalUnlock GetLastError SetLastError WaitForSingleObject ExitProcess GetCurrentProcess DuplicateHandle GetThreadContext VirtualProtectEx WriteProcessMemory FlushInstructionCache TlsSetValue GetCurrentThreadId GetCommandLineA GetStartupInfoA RaiseException HeapAlloc HeapFree RtlUnwind DeleteCriticalSection InterlockedExchange GetFileSize

user32

SetWindowLongA SetWindowTextA SendMessageA GetDlgItem wsprintfA WaitForInputIdle CharUpperA MessageBoxA DialogBoxIndirectParamA SetDlgItemTextA MsgWaitForMultipleObjects CharLowerBuffA SetFocus BeginPaint EndPaint LoadStringA FillRect ScreenToClient GetWindowTextLengthA GetWindowTextA GetWindowPlacement SendDlgItemMessageA GetMessageA DefWindowProcA GetParent GetWindow SystemParametersInfoA MapWindowPoints SetWindowPos GetPropA EnableMenuItem SetPropA RemovePropA ShowWindow IsWindow GetSysColor LoadImageA CreateDialogParamA GetDC ReleaseDC SetActiveWindow PeekMessageA IsDialogMessageA TranslateMessage DispatchMessageA DestroyWindow CreateDialogIndirectParamA SetForegroundWindow GetDesktopWindow GetClientRect EnableWindow IsWindowEnabled GetWindowDC UpdateWindow InvalidateRect DrawIcon MapDialogRect GetClassNameA CallWindowProcA DrawFocusRect InflateRect DrawTextA CopyRect EnumChildWindows CreateWindowExA RegisterClassExA IntersectRect GetDlgItemTextA GetWindowLongA GetWindowRect MoveWindow EndDialog LoadIconA

gdi32

CreateCompatibleBitmap CreateDCA GetStockObject GetTextExtentPoint32A CreatePatternBrush DeleteMetaFile SetMetaFileBitsEx SetStretchBltMode SelectClipRgn SetPixel PatBlt PlayMetaFile StretchBlt CreateBitmap SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx CreateDIBitmap SaveDC SetBkMode SetTextColor TextOutA RestoreDC GetTextExtentPointA CreateFontIndirectA SetBkColor CreateRectRgn DeleteObject CreateSolidBrush GetDIBColorTable GetSystemPaletteEntries CreatePalette CreateHalftonePalette GetDeviceCaps GetObjectA CreateCompatibleDC UnrealizeObject SelectPalette RealizePalette SelectObject BitBlt DeleteDC SetMapMode

advapi32

RegCloseKey RegQueryValueA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyExA RegEnumKeyA RegOpenKeyA FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken OpenThreadToken

shell32

SHGetPathFromIDListA SHGetMalloc ShellExecuteExA SHGetSpecialFolderLocation

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString SysAllocString SysAllocStringLen SysReAllocStringLen SysStringLen GetErrorInfo VariantClear VariantChangeType

lz32

LZOpenFileA LZCopy LZClose

rpcrt4

RpcStringFreeA UuidCreate UuidToStringA

Sharing

General

Malware Config

Signatures

File Explorer

PL2303_Prolific_DriverInstaller_v1.10.0.exe

PE Signature issue

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

lz32

rpcrt4

generic