Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
AdbWinApi.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
AdbWinApi.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Private Hack.sp.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Private Hack.sp.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
adb.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
adb.exe
Resource
win10v2004-20231215-en
Target
Private_Hack_V2.3_1.rar
Size
10.4MB
MD5
14a890fb3b2ff63a63598be0fd280e4f
SHA1
d4c5ae2995557c9a3cbc4e367a86ba4591d703ac
SHA256
f834e867ad10e5f07d088cb35fdc9346f444385901d8928e5e8e38b04ff0c8a9
SHA512
18b5f62b1b33c806f5f98f20ab6ab3489df6d62842e44842798448a132185239923335eefef72b13c16f31fd677fb1d20dfdaf8ba47295aede29f34dc29fcaa3
SSDEEP
196608:/oyHerHFdTQNuHQ1Pc1gETjXK9Fql+/kJ+VbeXS0hOYFkeOMis9k5+s:/tS+MQ1PcTXXiIUkYVQSuNEMiB59
Checks for missing Authenticode signature.
resource |
---|
unpack001/Private Hack.sp.exe |
unpack001/adb.exe |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb
CoCreateInstance
GetACP
SetLastError
CloseHandle
GetLastError
DeviceIoControl
WriteFile
ReadFile
GetOverlappedResult
CreateFileW
WideCharToMultiByte
Sleep
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetSystemDirectoryW
RaiseException
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetVersionExA
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
OutputDebugStringA
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetModuleHandleW
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
??0AdbEndpointObject@@QAE@ABV0@@Z
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??0AdbIOCompletion@@QAE@ABV0@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??0AdbInterfaceObject@@QAE@ABV0@@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??0AdbObjectHandle@@QAE@ABV0@@Z
??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z
??1AdbEndpointObject@@MAE@XZ
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
??1AdbObjectHandle@@MAE@XZ
??4AdbEndpointObject@@QAEAAV0@ABV0@@Z
??4AdbIOCompletion@@QAEAAV0@ABV0@@Z
??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z
??4AdbObjectHandle@@QAEAAV0@ABV0@@Z
??_7AdbEndpointObject@@6B@
??_7AdbIOCompletion@@6B@
??_7AdbInterfaceObject@@6B@
??_7AdbObjectHandle@@6B@
?AddRef@AdbObjectHandle@@UAEJXZ
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ
?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?IsOpened@AdbObjectHandle@@QBE_NXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?Lookup@AdbObjectHandle@@SGPAV1@PAX@Z
?Release@AdbObjectHandle@@UAEJXZ
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?Type@AdbEndpointObject@@SG?AW4AdbObjectType@@XZ
?Type@AdbIOCompletion@@SG?AW4AdbObjectType@@XZ
?Type@AdbInterfaceObject@@SG?AW4AdbObjectType@@XZ
?adb_handle@AdbObjectHandle@@QBEPAXXZ
?endpoint_id@AdbEndpointObject@@QBEEXZ
?endpoint_index@AdbEndpointObject@@QBEEXZ
?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ
?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ
?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ
?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ
?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ
?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ
?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ
AdbCloseHandle
AdbCreateInterface
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetDefaultBulkReadEndpointInformation
AdbGetDefaultBulkWriteEndpointInformation
AdbGetEndpointInformation
AdbGetEndpointInterface
AdbGetInterfaceName
AdbGetOvelappedIoResult
AdbGetSerialNumber
AdbGetUsbConfigurationDescriptor
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbHasOvelappedIoComplated
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbOpenEndpoint
AdbQueryInformationEndpoint
AdbReadEndpointAsync
AdbReadEndpointSync
AdbResetInterfaceEnum
AdbWriteEndpointAsync
AdbWriteEndpointSync
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WSACleanup
CertFreeCertificateContext
GetTokenInformation
ConvertThreadToFiber
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetClassNameW
CharUpperBuffW
ShellExecuteA
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
D3D11CreateDeviceAndSwapChain
D3DX11CreateShaderResourceViewFromMemory
DwmExtendFrameIntoClientArea
URLDownloadToFileA
D3DCompile
BCryptGenRandom
UnloadUserProfile
UuidCreate
ImmReleaseContext
strchr
_initialize_narrow_environment
fgetc
_unlock_file
_strdup
free
srand
strtod
_gmtime64
_libm_sse2_sin_precise
_mbsicmp
localeconv
getenv
��iy��$��ێ�8\f�Ȁ�X�e�/l8nձ�P7�U� m:q�H�em͒� ���L]���r����� ��(/�����d`���cH�K��J)��FnT�bTmmv��9�0-k���O��u�}��̂�ߴ�ee��&v��N�g����D�*د�1>c�y���8���u>�4��=&�R;�2m n*�Nӛ���P}����Q)w��I2����ov^*����]��Yy����)���W��̽�i�O�W�S�B �U[����}ڛ�`��Et�%��o��ɼ�52O��(tu�e6X���$jm���xo�>���p�"?>��6�"d�v��u�G�P�5sc}uUTm_H@�# L�֒P�8F������c��ː6d� �S�����Y'��`w��!��=��*67[J�� FS��F���uY"����sBa���A�q��Lf����P>B�����J�ƕ���^����*0��Ҩ�|xZ0R��l["{�GW����M��&pz�r�&6�ó����'����L(���R�#? ��i�%�Bqd��B<��^-��[Y)��J�n���d�ƾgCa(�b"�;�=�f�>���N1��`��ϺCk�� ���ׅV\�nyd�)α�V�D�&և�5��� ��S�d�F�����S�u5 #���7j����т�*�S�djCb���k)lX�� i�e _���S���i��A��t?g�S�D�/^����U��D��qb��1f9:��f��]}㺺zJh���B���;��HZ�:�]w_�3$2����&Rqqi�|R{���I$MTc���q������JxC�5�.�ܴ����d������Rnw�"�n^�o!cR�~[�Őn�Z7ea��eR�����DC�9�ws���g֙�\�T궚�L�.4��S]E�庄��T�D$��9�V-<��gv\�q���h(&(� e04�2�J��#�$�����k�g,�����J��Wp��ey�-3<9j����d��ñ��-�6�SჃ!�F�L���i��Ҏ�R|�y$.I�(]>��N>��wL�fC��¯�/I4�-X�� �/�L�)L^��o�&�A��]��g��_�@�`|��ʾ�6L)�(���v��x�{kn܆Q�v����gF��L6\@͌w�@|VY#i����I 5P*Tד�z:S�B���Y�u�'&���Dw�M�<����̑�S�i�y����x^^����,J*��=�i�H'v�A\;ɑ�.7�$��W,�V�S);Ȩ!@&\��E*�Hb�߷���Zb͐R����j�T�/�/��f���q�H{M�������{8�w��.��J��w@w���yb�F�6.j{�χ$�-�*�F�ݽ�,��y�Cjl��>]�lD��,@��Ң�ю%P�#�����WvN�� ~s��������kP�N�'\4�Ċ:ס/�eO��|uz��k3���v�`��MNN�����{Ur���{Zi�}�u��~9� ��H��)J-DE��\_�0û��~� ���F֕p*����L�s�K����R+�Z��R��:?�`7oϠ�̈́�s�XԻ�7�KG��x�L����Q�B�B�&^0d�qEVC���4~��Ps�;�xQ��7J��H�1+<,r:Ǔ��`d�݆}J�̺^Iy�D�TC[�2)ٱ��HH�ӵB�{ھ<�x�y�'�E!���>Ve���?8d�ñ�+��֓%��z�zq�+[�y���9�=�8B�G����Q'w"PxiJe�dF']���8Wl �ra0f�'Q�hR_��P�g�Ak(ZN�T��?+�`!��`U��^����8��%/�d7�ʚw(}�^��,J;Q��\|+f�V�B ���-*�t�[-z�lFP&ːݺL��QN���Xf�%y���S���P/��UN�vU�/��K��� ���V��N�Ϸ�� ����_p��a9:g�!�:Y��Ee����&лfX�v���Nd�K��d�"�9p����t�$E���0~�����5�5/-`%���C�eJf뺚0��uw�}�e�P��b�D%� t¢���ʛ)����K���S�)~(���@s��0�EEˆ�P>\Í�`�L�Ww��Ҿ��J���.����]�z~K��� jc��+?8/�C��;��G��K���mX�ԭ3)F�6+�����7�oѳG*�H43� �=�LNh �8w��:qOᲱ�ר�eR�,+��b�-����/%��w �A��B�cR�����ٌ���g�"��hzd�{�zD��,�����X�����9�N��v�/稓ˁUֶ&<���M%���[#SޭX�Y��U+�L2 \K�+���LѨN�G�S[hz�'�=�q����:KEm��=�/��VY�:G�*�4O�鋍�w����j���Cܩ)�3�AA6ӽ҇���^2q�p��yF%9 �妻Y���X ��o�a9[� � (p��Q��1��աJ��s.��=��!�.�T.$�Ϲ;۪lC�8j���ǵ�6�(���]�<��8N�4R�F]���fNQ' ��yt�������^#��=���/H5��j� 5f�+�O!����͓�Z��eT�=!P���\J���k�dCs��p�l��X,f�9��3�(��J����Co��Wd��� M��������Ĉ���dK�Ao1/(��_Ѣ��͡�~bMQ!��6GVC;�����?GW��R(��xk��C~��Zq/3[j��r�R4O�B�gs%0D,�e&��큪�N�(�L-�d��1!Ͽ�Y1�!�#t��rf��X�*��n4#w�vDZ-� |��.x�L�J?�ܙc�aӽ��m���� ����<Q �P�����S��*NpO)��Rڽϟ:�YuH\3�����nIJ�]�Js����43~u�ύ�\燀~:�]�E�#�jU>S� ����b�:�D���x9r���;�VzR)q�g!��1l�+KS�sXm�p[�j��%���� ��bQ2�Q�_Dk4���)۶���Q� �(8������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
DeregisterEventSource
RegisterEventSourceA
ReportEventA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
DeleteObject
GetBitmapBits
GetDeviceCaps
GetObjectA
SelectObject
CloseHandle
CreateEventA
CreateFileA
CreatePipe
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ResetEvent
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
Sleep
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
_access
_chmod
_getcwd
_getpid
_read
_stat
_strdup
_stricmp
_umask
_unlink
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthread
_beginthreadex
_cexit
_endthreadex
_errno
_exit
_findclose
_findfirst
_findnext
_fullpath
_getch
_iob
_isctype
_mkdir
_onexit
_pctype
_setmode
_stricmp
_strnicmp
_vsnprintf
_wfopen
abort
atexit
atoi
calloc
exit
fclose
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
memmove
memset
perror
qsort
raise
realloc
setvbuf
signal
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strtol
strtoul
time
tolower
vfprintf
wcslen
wcsstr
SHGetFolderPathA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
WSACleanup
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
htonl
htons
listen
recv
send
setsockopt
shutdown
socket
AdbCloseHandle
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetEndpointInformation
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbReadEndpointSync
AdbWriteEndpointSync
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE