CH34x_Install_Windows_v3_4[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
CH34x_Install_Windows_v3_4.zip
Size 189KB
Sample261113-ff6tbsfx21
SHA256 a48b9bf34d1cb175d8e20b0bc6ce3e5264a8724d3bf1b17f1f9e048d7fb49856
MD5 69dc9956f983c3bc1bf16d4dbbdf4eb5
SHA1 98a57030bf5f0904712e9225d756266bea315777
SHA512 6f9450e6fd4f3aa9fea61927b0e7dd13cf010a658cd475eb9bf585e9fa4367866007e4d651dcbbc34252ee8ab033b706aa4edacc5e776603dbe565d1bbedd236
SSDEEP 3072:BdZeAfh3M9GOlhuGJ6I7onkdujJcc0WMc03dFORPSPo48Op4l896kwP:BdZg7ijJmWM93dYlGOGY
TLSH
T1741423B16D732F6837D34D2203A591E4E8F0A5311945BC90EECEA59B28E7B737F16610
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CH34x_Install_Windows_v3_4.EXE

File Explorer

CH34x_Install_Windows_v3_4.zip

.zip 189KB
CH34x_Install_Windows_v3_4.EXE

.exe 237KB

CH34x_Install_Windows_v3_4.zip

SHA256 a48b9bf34d1cb175d8e20b0bc6ce3e5264a8724d3bf1b17f1f9e048d7fb49856
MD5 69dc9956f983c3bc1bf16d4dbbdf4eb5
SHA1 98a57030bf5f0904712e9225d756266bea315777
SHA512 6f9450e6fd4f3aa9fea61927b0e7dd13cf010a658cd475eb9bf585e9fa4367866007e4d651dcbbc34252ee8ab033b706aa4edacc5e776603dbe565d1bbedd236
SSDEEP 3072:BdZeAfh3M9GOlhuGJ6I7onkdujJcc0WMc03dFORPSPo48Op4l896kwP:BdZg7ijJmWM93dYlGOGY
TLSH
T1741423B16D732F6837D34D2203A591E4E8F0A5311945BC90EECEA59B28E7B737F16610
MD5 SHA1 SHA512 SSDEEP TLSH

CH34x_Install_Windows_v3_4.EXE

IMPHASH bc5ce990cf54f8d435a68eb97512f73e
SHA256 9cf96fddf474eda80f2b4c09f8ef19443cf6768429819e4cba7b869291b7b8b5
MD5 1af3fdebfbab3e247feb588aea64dd64
SHA1 d557a8978877199bafe2e7baac63adab17bed05d
SHA512 d0b7c4dd6726d8e1e894654f671bf4e00c1fdb91fc46f40bb02fd689ff2cca8036b92c1358e10f810fc3e1b518cbcf91b0a1e3a3ee8d36d179ec7bab43ea35c9
SSDEEP 3072:h8U2yJN5f661xRZbALxB1Ojdgx8GYXfPGJ6I7onkduFJcc0WMc23dFORPSPo46Om:h8U2qy6rRZb7jxGYXDFJmWM93dYlGAGs
TLSH
T14C34E110BBD241F6D0811B3018BD6376DA38FF212E70F299DBDA5D5A2C34612B51EBB6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize