General

  • Target

    mobikin-eraser-for-android.exe

  • Size

    20.3MB

  • MD5

    929ce9627f3bca0d64b3c344f656937d

  • SHA1

    a5fe3beda50572414a959b26feb6c357f200e4a4

  • SHA256

    52a46e8d079ea9ed900f3784ded4406c3819e6e479ad7d5cac10073bb0fece31

  • SHA512

    346ffd57443dce9d04832c71ab9622294fb6b113f8c00cb0002604f4ca689b71409f172ff043a3c518899cee4ad04bada82d4db39b368cdfebbf3cbf9adb18ba

  • SSDEEP

    393216:hQ8k3uzwLk8GrbW2jRt8q+umxfD57xvu0BaSEejQam1b+fnNSQDsKBVcck3M:hQ8k3uzwOnW2bsZvv5saZnNSRKIcR

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 14 IoCs
  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

Files

  • mobikin-eraser-for-android.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.txt
  • $PLUGINSDIR/license_br.txt
  • $PLUGINSDIR/license_cn.txt
  • $PLUGINSDIR/license_de.txt
  • $PLUGINSDIR/license_es.txt
  • $PLUGINSDIR/license_fr.txt
  • $PLUGINSDIR/license_it.txt
  • $PLUGINSDIR/license_jp.txt
  • $PLUGINSDIR/license_tw.txt
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/wizard120.bmp
  • $PLUGINSDIR/wizard144.bmp
  • $PLUGINSDIR/wizard192.bmp
  • $PLUGINSDIR/wizard96.bmp
  • ApplicationManifest.json
  • Bin/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    776334619bd19ec23e3a7a275473b5a7


    Headers

    Imports

    Exports

    Sections

  • Bin/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    72b8c869f01047191838df5f58e88dd8


    Headers

    Imports

    Exports

    Sections

  • Bin/AndroidAssistServer.exe
    .exe windows:6 windows x86 arch:x86

    f43776d586ebb7086c1edcbf6c28ff8a


    Code Sign

    Headers

    Imports

    Sections

  • Bin/AndroidAssistService.exe
    .exe windows:6 windows x86 arch:x86

    998b35c84b3478c7362bc076ee16e9d4


    Code Sign

    Headers

    Imports

    Sections

  • Bin/InstallDriver.exe
    .exe windows:6 windows x86 arch:x86

    344462117bc585b4889b7285e5e04f50


    Code Sign

    Headers

    Imports

    Sections

  • Bin/InstallDriver64.exe
    .exe windows:6 windows x64 arch:x64

    70827392d15e010ea13fef1acf2dae57


    Code Sign

    Headers

    Imports

    Sections

  • Bin/MobiKin Eraser for Android.exe
    .exe windows:6 windows x86 arch:x86

    5dd3f457585790e61ffd591b1b930a09


    Code Sign

    Headers

    Imports

    Sections

  • Bin/Module.View.dll
    .dll windows:6 windows x86 arch:x86

    876de3ec2d9c13ac045086f2e7def5a9


    Headers

    Imports

    Exports

    Sections

  • Bin/adb.exe
    .exe windows:4 windows x86 arch:x86

    6123430d6e6f1558d998011e8f5fb0f5


    Headers

    Imports

    Exports

    Sections

  • Bin/com.mobikin.androidassistant.PhoneConnActivity.apk
    .apk android

    com.mobikin.androidassistant

    com.androidassistant.ui.FullscreenActivity


  • Bin/concrt140.dll
    .dll windows:6 windows x86 arch:x86

    a7f0e297dae66d5b73188a236ad0ae0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/curl-ca-bundle.crt
  • Bin/libBasic.dll
    .dll windows:6 windows x86 arch:x86

    d2101bac7d2a987a5ef1100a6f42493a


    Headers

    Imports

    Exports

    Sections

  • Bin/libHelper.dll
    .dll windows:6 windows x86 arch:x86

    7f8e35fbf26f0d49a9efb9d0647f2d14


    Headers

    Imports

    Exports

    Sections

  • Bin/libI18n.dll
    .dll windows:6 windows x86 arch:x86

    7d328f7723499ec85a69edd941986d78


    Headers

    Imports

    Exports

    Sections

  • Bin/libIPC.dll
    .dll windows:6 windows x86 arch:x86

    373688f3a7d37abeb008872a2227a90d


    Headers

    Imports

    Exports

    Sections

  • Bin/libRG.dll
    .dll windows:6 windows x86 arch:x86

    3bcb7bc0373f7c88a8cc805b731c93bf


    Headers

    Imports

    Exports

    Sections

  • Bin/libUpdate.dll
    .dll windows:6 windows x86 arch:x86

    23c6cd94ea423993873dd6fb90a4d26a


    Headers

    Imports

    Exports

    Sections

  • Bin/libcrypto-1_1.dll
    .dll windows:4 windows x86 arch:x86

    9c3d43842eff50541bc3ee3405238868


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    f5dca50695d12e3d38611a36a6f83d38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libexpat.dll
    .dll windows:5 windows x86 arch:x86

    3e8feaacb321fb79a0d7d06b5b650752


    Headers

    Imports

    Exports

    Sections

  • Bin/libgccfree.dll
    .dll windows:4 windows x86 arch:x86

    f6a2c4c0f0781c620790a0c5c240e232


    Headers

    Imports

    Exports

    Sections

  • Bin/libglog.dll
    .dll windows:6 windows x86 arch:x86

    b035a67312aaae022beba98360da8024


    Headers

    Imports

    Exports

    Sections

  • Bin/libpng14-14.dll
    .dll windows:4 windows x86 arch:x86

    e7fefd075956887a4465f3bb8bc65411


    Headers

    Imports

    Exports

    Sections

  • Bin/libssl-1_1.dll
    .dll windows:4 windows x86 arch:x86

    8a6299512038577b8910fa9c4d32b3b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libxml2-2.dll
    .dll windows:4 windows x86 arch:x86

    e0b36b92da76a22f3727f03f309ceed5


    Headers

    Imports

    Exports

    Sections

  • Bin/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6dbd7763e94344402d4206b7bab40e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/msvcp140_1.dll
    .dll windows:6 windows x86 arch:x86

    badc88dcecb53267a454e1969fb4ce2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/msvcp140_2.dll
    .dll windows:6 windows x86 arch:x86

    93349915df9759fa7a16a326552ba61b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    5d8cffde43880e6cd40099ce37d02499


    Headers

    Imports

    Exports

    Sections

  • Bin/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    923aa130c21002b50b462e446b3be0d9


    Headers

    Imports

    Exports

    Sections

  • Bin/vccorlib140.dll
    .dll windows:6 windows x86 arch:x86

    7bbb5ae4c5aa5ae8ccf84c3a96ba2cd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    6a84b7445ccacd5d29ac27de2745f356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    d6281b62aae61d697629e6b66731d6e6


    Headers

    Imports

    Exports

    Sections

  • Driver/google_usb_driver.zip
    .zip
  • amd64/NOTICE.txt
  • amd64/WUDFUpdate_01009.dll
    .dll windows:6 windows x64 arch:x64

    2d556b4fd0343868b288619b2a5c9d8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • amd64/WdfCoInstaller01009.dll
    .dll windows:6 windows x64 arch:x64

    70497fec79daa5f71de3b34faee686a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • amd64/winusbcoinstaller2.dll
    .dll windows:6 windows x64 arch:x64

    8248dad30db39242289209dc3ff9aa66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • android_winusb.inf
  • androidwinusb86.cat
  • androidwinusba64.cat
  • i386/NOTICE.txt
  • i386/WUDFUpdate_01009.dll
    .dll windows:6 windows x86 arch:x86

    30448524ab936448298b5c1294b1bbbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • i386/WdfCoInstaller01009.dll
    .dll windows:6 windows x86 arch:x86

    a17af54bf9d379152b9c377204b35eb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • i386/winusbcoinstaller2.dll
    .dll windows:6 windows x86 arch:x86

    8346f3fd2848988fb391cc309c0dbe66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • source.properties
  • I18n/de_DE/strings.mo
  • I18n/en_US/strings.mo
  • I18n/es_ES/strings.mo
  • I18n/fr_FR/strings.mo
  • I18n/it_IT/strings.mo
  • I18n/ja_JP/strings.mo
  • I18n/pt_PT/strings.mo
  • I18n/zh_CN/strings.mo
  • I18n/zh_TW/strings.mo
  • License/license_br.txt
  • License/license_cn.txt
  • License/license_de.txt
  • License/license_es.txt
  • License/license_fr.txt
  • License/license_it.txt
  • License/license_jp.txt
  • License/license_tw.txt
  • Option.json
  • Plugins/Comm/1.0.2/Resources/contact-edit-add-normal.png
    .png
  • Plugins/Comm/1.0.2/Resources/contact-edit-add-pressed.png
    .png
  • Plugins/Comm/1.0.2/libComm.dll
    .dll windows:6 windows x86 arch:x86

    b217e446ef904e1b5577be97b5752789


    Headers

    Imports

    Exports

    Sections

  • Plugins/Comm/1.0.2/plugin.load
  • Plugins/Erase/1.0.2/Resources/Erase.json
  • Plugins/Erase/1.0.2/Resources/UsbDebug.json
  • Plugins/Erase/1.0.2/Resources/alert.png
    .png
  • Plugins/Erase/1.0.2/Resources/analyzing-data.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/arrow.png
    .png
  • Plugins/Erase/1.0.2/Resources/close-normal.png
    .png
  • Plugins/Erase/1.0.2/Resources/close-pressed.png
    .png
  • Plugins/Erase/1.0.2/Resources/close.png
    .png
  • Plugins/Erase/1.0.2/Resources/complete.png
    .png
  • Plugins/Erase/1.0.2/Resources/computer.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect-failed.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect-via-wifi-normal.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect-via-wifi-pressed.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/loading.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/connect/mtp/usb-prompt-picture-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/mtp/usb-prompt-picture-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/mtp/usb-prompt-picture-3.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/allow.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/app-logo.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/fail.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/loading.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/connect/permission/prompt-picture-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/prompt-picture-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/prompt-picture-3.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/successs.png
    .png
  • Plugins/Erase/1.0.2/Resources/connect/permission/warning.png
    .png
  • Plugins/Erase/1.0.2/Resources/connected.png
    .png
  • Plugins/Erase/1.0.2/Resources/data-deletion.png
    .png
  • Plugins/Erase/1.0.2/Resources/data-erasure.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/advance-disable.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/advance-normal.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/advance-pressed.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/allow-mtp-access.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/android-6.0-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/android-6.0-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/back-disable.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/back-normal.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/back-pressed.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/debug-sucessed.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/google-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/google-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/htc-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/htc-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/huawei-honor-series-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/huawei-honor-series-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/huawie-mate-series-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/huawie-mate-series-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/lg-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/lg-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/motorola-debug.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/oneplus-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/oneplus-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/oppo-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/oppo-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/samsung-galaxy-s7-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/samsung-galaxy-s7-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/samsung-galaxy-s9-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/samsung-galaxy-s9-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/vivo-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/vivo-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/xiaomi-mi5-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/xiaomi-mi5-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/xiaomi-redmi-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/xiaomi-redmi-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/zte-debug-1.png
    .png
  • Plugins/Erase/1.0.2/Resources/debug/zte-debug-2.png
    .png
  • Plugins/Erase/1.0.2/Resources/deriver-verify-signed.png
    .png
  • Plugins/Erase/1.0.2/Resources/deriver-verify-unsigned.png
    .png
  • Plugins/Erase/1.0.2/Resources/detail.png
    .png
  • Plugins/Erase/1.0.2/Resources/device-connect.png
    .png
  • Plugins/Erase/1.0.2/Resources/device.png
    .png
  • Plugins/Erase/1.0.2/Resources/driver-installation.png
    .png
  • Plugins/Erase/1.0.2/Resources/dropdown.png
    .png
  • Plugins/Erase/1.0.2/Resources/erase-all-data.png
    .png
  • Plugins/Erase/1.0.2/Resources/erase-all.png
    .png
  • Plugins/Erase/1.0.2/Resources/erase-failed.png
    .png
  • Plugins/Erase/1.0.2/Resources/erase-now.png
    .png
  • Plugins/Erase/1.0.2/Resources/erasing.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/factory-data-reset.png
    .png
  • Plugins/Erase/1.0.2/Resources/fail.png
    .png
  • Plugins/Erase/1.0.2/Resources/finish-tick.png
    .png
  • Plugins/Erase/1.0.2/Resources/install-app-tip.png
    .png
  • Plugins/Erase/1.0.2/Resources/install-failed.png
    .png
  • Plugins/Erase/1.0.2/Resources/ios.png
    .png
  • Plugins/Erase/1.0.2/Resources/loading.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/phone-select-disable.png
    .png
  • Plugins/Erase/1.0.2/Resources/phone-select-normal.png
    .png
  • Plugins/Erase/1.0.2/Resources/phone.png
    .png
  • Plugins/Erase/1.0.2/Resources/prompt.png
    .png
  • Plugins/Erase/1.0.2/Resources/question.png
    .png
  • Plugins/Erase/1.0.2/Resources/radio-check-disable.png
    .png
  • Plugins/Erase/1.0.2/Resources/radio-check-no.png
    .png
  • Plugins/Erase/1.0.2/Resources/radio-check-yes.png
    .png
  • Plugins/Erase/1.0.2/Resources/restart.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/round-cancel.png.png
    .png
  • Plugins/Erase/1.0.2/Resources/scanning.gif
    .gif
  • Plugins/Erase/1.0.2/Resources/section-buttom.png
    .png
  • Plugins/Erase/1.0.2/Resources/successful.png
    .png
  • Plugins/Erase/1.0.2/Resources/tip.png
    .png
  • Plugins/Erase/1.0.2/Resources/trust.png
    .png
  • Plugins/Erase/1.0.2/Resources/unlock.png
    .png
  • Plugins/Erase/1.0.2/Resources/usb.png
    .png
  • Plugins/Erase/1.0.2/Resources/wifi-connect-firewall-block.png
    .png
  • Plugins/Erase/1.0.2/libErase.dll
    .dll windows:6 windows x86 arch:x86

    0ba3dd9c445caacf30fe6da5fa089638


    Headers

    Imports

    Exports

    Sections

  • Plugins/Erase/1.0.2/plugin.load
  • Plugins/Title/1.0.2/Resources/Title.json
  • Plugins/Title/1.0.2/Resources/close-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/close-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-buy-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-buy-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-help-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-help-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-home-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-home-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-maximize-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-maximize-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-register-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-register-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-reset-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-reset-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-setting-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-setting-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/min-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/min-pressed.png
    .png
  • Plugins/Title/1.0.2/libTitle.dll
    .dll windows:6 windows x86 arch:x86

    da90b92210c5677341732ebbe3bcc76c


    Headers

    Imports

    Exports

    Sections

  • Plugins/Title/1.0.2/plugin.load
  • Resources/alert.png
    .png
  • Resources/application128x128.png
    .png
  • Resources/application32x32.png
    .png
  • Resources/close-normal.png
    .png
  • Resources/close-pressed.png
    .png
  • Resources/preview-edit.png
    .png
  • Resources/register/buy-now.png
    .png
  • Resources/register/dropdown.png
    .png
  • Resources/register/dropup.png
    .png
  • Resources/register/edit.png
    .png
  • Resources/register/email.png
    .png
  • Resources/register/key.png
    .png
  • Resources/register/no.png
    .png
  • Resources/register/register.png
    .png
  • Resources/register/registered.png
    .png
  • Resources/register/tip-register.png
    .png
  • Resources/register/unregistered.png
    .png
  • Resources/register/yes.png
    .png
  • license.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp