DC - Unlocker 2 Client 1[.]00[.]1374 [Full _ 2017][.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

DC - Unlocker 2 Client 1.00.1374 [Full _ 2017].rar
Size

4.6MB
MD5

b34e0d270857d0eb025f4f637013b8ea
SHA1

09978dda0e241d9b4a774a91e7f3ceb4b9dddbad
SHA256

9da934614b12c5ede86e9b6a75e23930fe5ff75bf68ce4635d631e292307a1fd
SHA512

e0661d531c3f07f52b47a0f5d78b86f8c8e25cd179e852126de81ab094d222eca79439a134a01e75332cb8fd68bf14c2429a223bcf489112631abadaee8ab103
SSDEEP

98304:g9rp1/IXZfcQbe4iwMZ9o8pEx2Eb+PC2KHKis+Yik+d1E3ERWyP:gp/A5iw+9o8p3SMKHKiq+dO3EIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/AdbWinApi.dll
unpack001/DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/AdbWinUsbApi.dll
unpack001/DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/fastboot.exe

Files

DC - Unlocker 2 Client 1.00.1374 [Full _ 2017].rar
.rar

Password: Asif.Kamboh.lucky
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/AdbWinApi.dll
.dll windows:6 windows x86 arch:x86

Password: Asif.Kamboh.lucky

c64cac39044626770353879245ea25e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb

Imports

ole32

CoCreateInstance

kernel32

GetACP
SetLastError
CloseHandle
GetLastError
DeviceIoControl
WriteFile
ReadFile
GetOverlappedResult
CreateFileW
WideCharToMultiByte
Sleep
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetSystemDirectoryW
RaiseException
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetVersionExA
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
OutputDebugStringA
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetModuleHandleW
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW

Exports

Exports

??0AdbEndpointObject@@QAE@ABV0@@Z
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??0AdbIOCompletion@@QAE@ABV0@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??0AdbInterfaceObject@@QAE@ABV0@@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??0AdbObjectHandle@@QAE@ABV0@@Z
??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z
??1AdbEndpointObject@@MAE@XZ
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
??1AdbObjectHandle@@MAE@XZ
??4AdbEndpointObject@@QAEAAV0@ABV0@@Z
??4AdbIOCompletion@@QAEAAV0@ABV0@@Z
??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z
??4AdbObjectHandle@@QAEAAV0@ABV0@@Z
??_7AdbEndpointObject@@6B@
??_7AdbIOCompletion@@6B@
??_7AdbInterfaceObject@@6B@
??_7AdbObjectHandle@@6B@
?AddRef@AdbObjectHandle@@UAEJXZ
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ
?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?IsOpened@AdbObjectHandle@@QBE_NXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?Lookup@AdbObjectHandle@@SGPAV1@PAX@Z
?Release@AdbObjectHandle@@UAEJXZ
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?Type@AdbEndpointObject@@SG?AW4AdbObjectType@@XZ
?Type@AdbIOCompletion@@SG?AW4AdbObjectType@@XZ
?Type@AdbInterfaceObject@@SG?AW4AdbObjectType@@XZ
?adb_handle@AdbObjectHandle@@QBEPAXXZ
?endpoint_id@AdbEndpointObject@@QBEEXZ
?endpoint_index@AdbEndpointObject@@QBEEXZ
?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ
?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ
?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ
?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ
?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ
?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ
?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ
AdbCloseHandle
AdbCreateInterface
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetDefaultBulkReadEndpointInformation
AdbGetDefaultBulkWriteEndpointInformation
AdbGetEndpointInformation
AdbGetEndpointInterface
AdbGetInterfaceName
AdbGetOvelappedIoResult
AdbGetSerialNumber
AdbGetUsbConfigurationDescriptor
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbHasOvelappedIoComplated
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbOpenEndpoint
AdbQueryInformationEndpoint
AdbReadEndpointAsync
AdbReadEndpointSync
AdbResetInterfaceEnum
AdbWriteEndpointAsync
AdbWriteEndpointSync

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/AdbWinUsbApi.dll
.dll windows:6 windows x86 arch:x86

Password: Asif.Kamboh.lucky

fda9f9f5f569ddd0dbf3ad8a275a2eb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\code\android\donut\development\host\windows\usb\winusb\objfre_wxp_x86\i386\AdbWinUsbApi.pdb

Imports

ole32

CoCreateInstance

kernel32

TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
OutputDebugStringA
ExitProcess
LoadLibraryA
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetProcAddress
HeapAlloc
HeapFree
RtlUnwind
GetVersionExA
GetCommandLineA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
Sleep
CreateFileW
WideCharToMultiByte
CreateEventW
CloseHandle
GetLastError
SetLastError
InterlockedDecrement
GetLocaleInfoA

winusb

WinUsb_GetDescriptor
WinUsb_Free
WinUsb_QueryPipe
WinUsb_GetOverlappedResult
WinUsb_ReadPipe
WinUsb_WritePipe
WinUsb_QueryInterfaceSettings
WinUsb_GetCurrentAlternateSetting
WinUsb_Initialize
WinUsb_SetPipePolicy

adbwinapi

?IsCompleted@AdbIOCompletion@@UAE_NXZ
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??1AdbEndpointObject@@MAE@XZ
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?AddRef@AdbObjectHandle@@UAEJXZ
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z

Exports

Exports

InstantiateWinUsbInterface

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/GSM FIRMWARE Logo.png
.png

Password: Asif.Kamboh.lucky
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/GsmFirmware URL.URL
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/Instructions...!!!.txt
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/dc-unlocker2client.exe
.exe windows:5 windows x86 arch:x86

Password: Asif.Kamboh.lucky

da9a06e60b4ee1ebae8b73690c604b4c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

10:00:f5:eb:e0:39:43
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

14-10-2007 22:01

Not After

14-10-2022 22:01

Subject

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

14:04:6f:ed:01:52:4e
Certificate

Issuer

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

14-12-2015 02:14

Not After

13-12-2017 18:27

Subject

CN=UAB Digiteka,O=UAB Digiteka,L=Panevėžio,ST=Vilniaus Apskritis,C=LT,1.2.840.113549.1.9.1=#0c136d616e61676572406469676974656b612e6c74

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:58:ca:91:9c:76:24:50:b9:0e:ed:42:a4:18:47:2c:f5:e4:0c:48
Signer

Actual PE Digest

27:58:ca:91:9c:76:24:50:b9:0e:ed:42:a4:18:47:2c:f5:e4:0c:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
Process32Next
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA

user32

GetKeyboardType
CreateWindowExA
CharUpperBuffW

advapi32

RegQueryValueExA
RegSetValueExA
RegCloseKey
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CLSIDFromString
OleUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA
SHGetSpecialFolderLocation

wininet

InternetGetConnectedState

comdlg32

GetSaveFileNameA

setupapi

SetupDiClassGuidsFromNameA
SetupDiGetClassDescriptionW

cfgmgr32

CM_Get_DevNode_Status

crypt32

CryptQueryObject

ntdll

ZwUnloadDriver

iphlpapi

GetNetworkParams

winscard

SCardDisconnect

imagehlp

ImageGetCertificateData

adbwinapi

AdbCloseHandle

wtsapi32

WTSSendMessageW

Exports

Exports

J�YO�j�P�6\|-�{c��F�b;_i->/�S�{��#�T��3_�@��`�*��0b4p(��5;!��M�b5ތ��waVF�:�>uX�8YN:O��2��2�f;x�6N��6H_R�G/�\��1cʢ��5�%i\,`Vu*Ռ�$�D��x(��q��E��'�Y��HC�[�t[Q�5[=�ex�U�Iy��Ɨ�A��<��eWoj��}J�`I�Jv'�^�g�$XfAN�X��5/$W��tF�gv��ݤ��$c� bk��6��7�ď:�7=�Q ��(��tm��ا$6cv�X��l��>��ǇI��bx�F,*KEmr�0l��vԧ9�-�%<a��$�Z�DJ��6O�L�ܕV?t\_v��!}d� T��U��C*��P��x��dYx��beZФ�-��(%�� )@Q��jG��'wܟ�� `�H@*.$��sP��Ձ�S��w�&��}y��a�gw ��/��DP��8.�]\��W��j�b၉��+ѲXie �3��V��)��XG�X��g�=��*~r8m�vi��SzT��S�<u�zv��ב��q�(r�o�Ŷ�|'�N��;(��O��̬�x�DA �eRvQ ��1 �\}^��\-�ʲ+��g��?J�?��tn�GC��s��̬-�>��Iw?}�ћ�ɼ�v�b7�hy�H�4^G<�6�H��*�<��S}Z�� `�� }��-$��14�⥔ �xD4�BXM��g�N��f��Y֣]�W��(��S}�mv�T��3�IA�2�I��=�� m�o?*R|I3�3�'��Q��0�^�(_��y��l�see��m��S�� 4��a 9�$�VeL�AW�J",��"@�Nm k'�_A�RG(|�4}ߵT�R��-�,��#x⚪?��S��&�@ �'�T)�4��[��;�^/�l6�gy�''�uy=aO�r�,�C3��į'}��"c_�Y��~��F��ţ�$|-^?XL}d��Z��p;!2C��w�ʢ��4�]��v��kf� Ϡ`�å��^�n��j2M�f�U�ڞ�A��9΁�D�=��qEw�N�s��^��ƋN]��e�s�*RY|�#^�!�#��{��U¤EB˜Vxml?R΅�* L�,/��\�ǿqq� 9�P>�N�F�'ʂd��.��/yK��cۻ�ٻ^��s�&u��]��4�`8K��o��~z��W��j�Q��&r�n��]BOf��R|�w��\��T9�!91�=C��8k��DkLy\��Yߜ��dq��l^OݪAz~ˇ��s�]L�P#�� ?ð�� -} 9��5��z��t)��B�+b��u4��>��D��EՋ�#�[Da��]��sp��%/i�S�t�Ä��죉�)x��ld�R{��9�=˙]�E��K�Ұ0��x��q��pٰt��Zb� ��|a�L-��0�ؼ#"$#�~Fl{��yJ�W��D��x2��B��c�Z�ֿ��Z�"��dz��p.��:��(&��g�!�&��Ҥ�eVJS��'��L��H.H��>� �!�\d�!R��k�T<A?��,{��[�M3��8Wu��S�{�Q!��s��J`��+��*A��_�k��^<��k��bwl�H+�4��/V�8�m�3Ye��Q"��Y�,Z9 �՜L��D@Y[L�c��[��t��bdAƕ��\.�n�Yuc��Gvޞ"|�E$Q7,௽9_1'#~��Zw ��C`��#��v"��n�oݫ�E܏j*CW�c)3M�dh��;`�m��4þ5&t��מgq�̯S�MFW�5�e57�lv8]�Q��r4}�K{�N��z�2vb��N_T�z<(׏h��>]��T�嶳��^�ܼK�0'*�:��R�*#��a݇ �T��"Qh/��}��ʇ$��8S�b��wڭ��\r7j��6��9��Y?2��gLm/}��~� W2Ĝ�f��intJ5�,�9�8��,|�AN��:_y��krI��=!y�L�/��'�G�@5W�w.e�0*�{��0y�Q��P�]P�ϱ��Q:��$�%J�:��e�UQݨj�*��g�b"4~��C�S��{��5;o��Yc��Ey�?��:v�v[�]�wXc^e.3f)��N{{�](�� bRF��¦�hܔI��ݱR{T��fQ��2-�&��/,#��e@��4�2K��'�+wC_ϛ؛/��Iݱ�M��_�?{��YnrE`teĝ�� J�z��gY �N��X��&�^ �)��'k��{��Զ �2��A�I��G�<��J'�q&��ci�� VR�<[H��0�a��ފޒ�,F w��Dc��kҶ].�#�0��i�]m��i�Zk$�FB�- ��̨�8^� ��r墌�1R��9�Y�,t��玴��X��n�U-�G �̝֚�Bs��čГ3�b�E��R$> :��9]�c�T\�˿'��i��;y#2��a��F��2{<�� ?dr%�nQ��.7�%4Έ��9QZEuB�C��7XsZ�,�^�;�%��1��#�V��V�@g��s��|\D��#�z��_�d��pt��W��Ug�EX}�� [�}Qqn��k[�N1�z�CW@��S�_�\�ʧ��pxp��֒��Pg|K�L%�T��n?��f��X��a� A�e3��hea#΃XcB��Ȑ'�݄�6k��#��k/.� ��u��ѳ'3�C��S��m|VT�4�

Sections

CODE
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 131KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 43B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DC - Unlocker 2 Client 1.00.1374 [Full Crack 2017]/fastboot.exe
.exe windows:4 windows x86 arch:x86

Password: Asif.Kamboh.lucky

0dd426bf38c8620396dff08b00c438b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetLastError
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte

msvcrt

_close
_fstat
_lseek
_open
_read
_strdup
_tempnam
_unlink
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_chsize
_errno
_iob
_isctype
_lseeki64
_onexit
_pctype
_setjmp
_setmode
_vsnprintf
_wopen
abort
atexit
calloc
exit
fprintf
fputc
free
fwrite
getenv
localeconv
longjmp
malloc
memchr
memcpy
memset
perror
printf
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtoul
vfprintf
wcslen
wcstombs

ws2_32

htonl
ntohl
ntohs

adbwinapi

AdbCloseHandle
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbReadEndpointSync
AdbWriteEndpointSync

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: Asif.Kamboh.lucky

Password: Asif.Kamboh.lucky

c64cac39044626770353879245ea25e4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ole32

kernel32

setupapi

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

Password: Asif.Kamboh.lucky

fda9f9f5f569ddd0dbf3ad8a275a2eb8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ole32

kernel32

winusb

adbwinapi

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

Password: Asif.Kamboh.lucky

Password: Asif.Kamboh.lucky

da9a06e60b4ee1ebae8b73690c604b4c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

10:00:f5:eb:e0:39:43Certificate

Key Usages

14:04:6f:ed:01:52:4eCertificate

Extended Key Usages

Key Usages

27:58:ca:91:9c:76:24:50:b9:0e:ed:42:a4:18:47:2c:f5:e4:0c:48Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

shell32

wininet

comdlg32

setupapi

cfgmgr32

crypt32

ntdll

iphlpapi

winscard

imagehlp

adbwinapi

wtsapi32

.text
Size: 80KB - Virtual size: 79KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

10:00:f5:eb:e0:39:43
Certificate

14:04:6f:ed:01:52:4e
Certificate

27:58:ca:91:9c:76:24:50:b9:0e:ed:42:a4:18:47:2c:f5:e4:0c:48
Signer

CODE
Size: - Virtual size: 2.9MB

DATA
Size: - Virtual size: 105KB

BSS
Size: - Virtual size: 131KB

.idata
Size: - Virtual size: 14KB

.tls
Size: - Virtual size: 36B

.rdata
Size: - Virtual size: 43B

.vmp0
Size: - Virtual size: 3.4MB

.vmp1
Size: 4.4MB - Virtual size: 4.4MB

.rsrc
Size: 7KB - Virtual size: 6KB

.text
Size: 122KB - Virtual size: 121KB

.data
Size: 512B - Virtual size: 256B

.rdata
Size: 27KB - Virtual size: 27KB

.bss
Size: - Virtual size: 3KB

.idata
Size: 3KB - Virtual size: 2KB