General

  • Target

    droidkit-es-setup.exe

  • Size

    19.6MB

  • MD5

    5c6e3cdc1b3cfd8209777c5d951a25aa

  • SHA1

    607ef83e98c183640f6c4bd1704da1e2502d65fa

  • SHA256

    045f769467d6b2ae5a984ed4ce7487c7c5568bf10db8d36a0118eaa99f46b2e7

  • SHA512

    9543bdc154dc3824ecd455e55ace7971ce84b55b67227bd1bb7c1e3d0b5e8c0c79d53deaa15c660ef8ab4651da8e510c67799b4c2af71af411069cbd4d10d8ec

  • SSDEEP

    393216:xoLB3A/Hp09nyBgvEIRlCgDWkZAr1UIsBwc6XYbTkrXDTNiDRUGJwPAEWXOx:xoaJ09nyBgvEI+gDWkZ0zYUX3NiDRUGm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • droidkit-es-setup.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CheckProVs.dll
    .dll windows:5 windows x86 arch:x86

    e8d4e166b8d3ddde3fcf32414a378490


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll windows:5 windows x86 arch:x86

    816e178c65c5aa0913ea6ddace6809ac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Help.ico
  • $PLUGINSDIR/Setup.ico
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe windows:5 windows x86 arch:x86

    5e3ce2eed99c49477aed11aea6091114


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-install.ico
  • $PLUGINSDIR/msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDui.dll
    .dll windows:6 windows x86 arch:x86

    0be1adc919fd39ab58c6b8970d33ad06


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    a89a235c853214d5f945ce4c2f607130


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    b6854db8fde386e6ef367d623b9e75d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/track_Official-es.txt
  • $PLUGINSDIR/uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll windows:5 windows x86 arch:x86

    816e178c65c5aa0913ea6ddace6809ac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/SkinBtn.dll
    .dll windows:4 windows x86 arch:x86

    52b4674351d6a835d928718775f75e15


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Uninstall.bmp
  • $PLUGINSDIR/Uninstall_trash.bmp
  • $PLUGINSDIR/bg.bmp
  • $PLUGINSDIR/btn_close.bmp
  • $PLUGINSDIR/btn_keep.bmp
  • $PLUGINSDIR/btn_minmize.bmp
  • $PLUGINSDIR/btn_select.bmp
  • $PLUGINSDIR/btn_select1.bmp
  • $PLUGINSDIR/btn_start.bmp
  • $PLUGINSDIR/btn_uninstall.bmp
  • $PLUGINSDIR/checkbox1.bmp
  • $PLUGINSDIR/checkbox2.bmp
  • $PLUGINSDIR/libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    032d4210457c33a359de5e82029c33fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    81ef8c6e85c963b099a573ac5ba77e02


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/select_bg.bmp
  • $PLUGINSDIR/un.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/unbg1.bmp
  • $PLUGINSDIR/unbg2.bmp
  • $PLUGINSDIR/uninstall.ini
  • $PLUGINSDIR/uninstall.ini