scrcpy[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

scrcpy.exe
Size

609KB
MD5

ce279f0b2aa1c092e684512a43198c93
SHA1

34e7d759aa07a2c6c7b38554e624b0280665bc6f
SHA256

62c7786df951de4f776e6dd8cdd9155fc52cdbb3e6205b240d3cd61164d5f816
SHA512

e90b66532c85ee04f7ce238775c0302581bc69fd725c82b1c388aa7096065f5db1239bac31363a212e394f4ccb0690e2159c01306a4a5cff0216011432c0993c
SSDEEP

12288:p1Ff7RpJttgLvEhM72CWHXAznhzJTXuklmkbT0h:p1npSLveM72NinhRakbT0h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
scrcpy.exe

Files

scrcpy.exe
.exe windows:4 windows x64 arch:x64

b2dd288a4cbea390e0df375b42078438

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
CreatePipe
CreateProcessW
DeleteCriticalSection
DeleteProcThreadAttributeList
EnterCriticalSection
FormatMessageA
GetCommandLineW
GetConsoleScreenBufferInfo
GetEnvironmentVariableW
GetExitCodeProcess
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoA
GetStdHandle
InitializeCriticalSection
InitializeProcThreadAttributeList
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
SetConsoleCtrlHandler
SetHandleInformation
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UpdateProcThreadAttribute
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_commode
_endthreadex
_errno
_fmode
_initterm
_lock
_onexit
_unlock
_wgetenv
_wstat64
abort
calloc
exit
fprintf
fputc
free
fwrite
getc
getenv
isalpha
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memmove
memset
perror
realloc
setbuf
signal
strchr
strcmp
strcspn
strerror
strlen
strncmp
strrchr
strspn
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
_strdup
_isatty

shell32

CommandLineToArgvW

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
htonl
htons
inet_pton
listen
ntohl
recv
send
setsockopt
socket

sdl2

SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_CreateCond
SDL_CreateMutex
SDL_CreateRGBSurfaceWithFormatFrom
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateThread
SDL_CreateWindow
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_DisableScreenSaver
SDL_EnableScreenSaver
SDL_FreeSurface
SDL_GL_BindTexture
SDL_GL_GetDrawableSize
SDL_GL_GetProcAddress
SDL_GL_UnbindTexture
SDL_GetClipboardText
SDL_GetDisplayUsableBounds
SDL_GetError
SDL_GetModState
SDL_GetMouseState
SDL_GetRelativeMouseMode
SDL_GetRendererInfo
SDL_GetVersion
SDL_GetWindowPosition
SDL_GetWindowSize
SDL_HideWindow
SDL_Init
SDL_LockMutex
SDL_LogDebug
SDL_LogError
SDL_LogGetPriority
SDL_LogInfo
SDL_LogMessageV
SDL_LogSetPriority
SDL_LogVerbose
SDL_LogWarn
SDL_PushEvent
SDL_Quit
SDL_RenderClear
SDL_RenderCopy
SDL_RenderCopyEx
SDL_RenderPresent
SDL_RenderSetLogicalSize
SDL_RestoreWindow
SDL_SetClipboardText
SDL_SetHint
SDL_SetPaletteColors
SDL_SetRelativeMouseMode
SDL_SetWindowFullscreen
SDL_SetWindowIcon
SDL_SetWindowPosition
SDL_SetWindowSize
SDL_ShowWindow
SDL_ThreadID
SDL_UnlockMutex
SDL_UpdateYUVTexture
SDL_WaitEvent
SDL_WaitThread
SDL_free

avcodec-59

av_grow_packet
av_new_packet
av_packet_alloc
av_packet_free
av_packet_ref
av_packet_rescale_ts
av_packet_unref
av_parser_close
av_parser_init
avcodec_alloc_context3
avcodec_close
avcodec_find_decoder
avcodec_free_context
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avcodec_version

avformat-59

av_find_best_stream
av_muxer_iterate
av_read_frame
av_write_frame
av_write_trailer
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_version
avformat_write_header
avio_close
avio_open

avutil-57

av_dict_set
av_frame_alloc
av_frame_free
av_frame_move_ref
av_frame_ref
av_frame_unref
av_get_bits_per_pixel
av_log_set_callback
av_malloc
av_pix_fmt_desc_get
avutil_version

msys-usb-1.0

libusb_close
libusb_control_transfer
libusb_exit
libusb_free_device_list
libusb_get_device
libusb_get_device_descriptor
libusb_get_device_list
libusb_get_string_descriptor_ascii
libusb_get_version
libusb_handle_events
libusb_has_capability
libusb_hotplug_deregister_callback
libusb_hotplug_register_callback
libusb_init
libusb_open
libusb_ref_device
libusb_strerror
libusb_unref_device

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 524KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2dd288a4cbea390e0df375b42078438

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

shell32

ws2_32

sdl2

avcodec-59

avformat-59

avutil-57

msys-usb-1.0

Sections

.text Size: 143KB - Virtual size: 142KB

.data Size: 512B - Virtual size: 432B

.rdata Size: 39KB - Virtual size: 38KB

.pdata Size: 3KB - Virtual size: 3KB

.xdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 524KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 1024B - Virtual size: 748B

/4 Size: 2KB - Virtual size: 2KB

/19 Size: 115KB - Virtual size: 115KB

/31 Size: 20KB - Virtual size: 19KB

/45 Size: 55KB - Virtual size: 54KB

/57 Size: 13KB - Virtual size: 12KB

/70 Size: 1KB - Virtual size: 1KB

/81 Size: 8KB - Virtual size: 8KB

/97 Size: 72KB - Virtual size: 71KB

/113 Size: 3KB - Virtual size: 2KB

.text
Size: 143KB - Virtual size: 142KB

.data
Size: 512B - Virtual size: 432B

.rdata
Size: 39KB - Virtual size: 38KB

.pdata
Size: 3KB - Virtual size: 3KB

.xdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 524KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 1024B - Virtual size: 748B

/4
Size: 2KB - Virtual size: 2KB

/19
Size: 115KB - Virtual size: 115KB

/31
Size: 20KB - Virtual size: 19KB

/45
Size: 55KB - Virtual size: 54KB

/57
Size: 13KB - Virtual size: 12KB

/70
Size: 1KB - Virtual size: 1KB

/81
Size: 8KB - Virtual size: 8KB

/97
Size: 72KB - Virtual size: 71KB

/113
Size: 3KB - Virtual size: 2KB