602353616b3d00a94feed4ea14220271_JaffaCakes118
- SHA256 5b519abd0a9b29da3007fe0d3e943eaae1d8bb885fd05429e1c113d2eca25c72
Overview
overview
7Static
static
6AdbWinApi.dll
windows7-x64
3AdbWinApi.dll
windows10-2004-x64
3AdbWinUsbApi.dll
windows7-x64
3AdbWinUsbApi.dll
windows10-2004-x64
3Superuser.apk
android-9-x86
6Superuser.apk
android-10-x64
7Superuser.apk
android-11-x64
7adb.exe
windows7-x64
3adb.exe
windows10-2004-x64
3busybox
debian-12-armhf
1motofail
debian-12-armhf
run.bat
windows7-x64
1run.bat
windows10-2004-x64
1su
debian-9-armhf
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
AdbWinApi.dll
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
AdbWinApi.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
AdbWinUsbApi.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
AdbWinUsbApi.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
Superuser.apk
Resource
android-x86-arm-20240624-en
android-9-x86
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
Superuser.apk
Resource
android-x64-20240624-en
android-10-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
Superuser.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
adb.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
adb.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
busybox
Resource
debian12-armhf-20240729-en
debian-12-armhf
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
motofail
Resource
debian12-armhf-20240418-en
debian-12-armhf
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
run.bat
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
run.bat
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
su
Resource
debian9-armhf-20240611-en
debian-9-armhf
0 signatures
150 seconds
General
- Target 602353616b3d00a94feed4ea14220271_JaffaCakes118
- Size 1.6MB
- Sample241020-d2p2laycpk
- SHA256 5b519abd0a9b29da3007fe0d3e943eaae1d8bb885fd05429e1c113d2eca25c72
- MD5 602353616b3d00a94feed4ea14220271
- SHA1 8446c9610ac5b269dfa32ff6f17b95dddde1ee91
- SHA512 70c555cba0953feed3d7519bae70bca44b3799e072070d12a9008ad68a01c8c555c8f930ecd7c20513a6e40f09c764455b773780802afa6f6616257fb87917ce
- SSDEEP 24576:I+Dz0rl4qP/OD/UuoKnlJfCytTHw2+t+fYDfEPxKY3kFzyLKIqTFNh/bQCcxgdso:5v06VLHlJqy1Qt2YTY/LK9TBzQCcxS
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 1 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/AdbWinApi.dll unpack001/AdbWinUsbApi.dll unpack001/adb.exe
File Explorer
-
602353616b3d00a94feed4ea14220271_JaffaCakes118.rar 1.6MB
-
AdbWinApi.dll.dll 94KB
-
AdbWinUsbApi.dll.dll 59KB
-
Superuser.apk.apk 823KB
-
adb.exe.exe 565KB
-
busybox.elf 1.8MB
-
motofail.elf 489KB
-
run.bat1KB
-
su.elf 21KB
AdbWinApi.dll
- IMPHASH c64cac39044626770353879245ea25e4
- SHA256 14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b
- MD5 47a6ee3f186b2c2f5057028906bac0c6
- SHA1 fde9c22a2cfcd5e566cec2e987d942b78a4eeae8
- SHA512 6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584
- SSDEEP 1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
30527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb
ole32
CoCreateInstance
kernel32
GetACP
SetLastError
CloseHandle
GetLastError
DeviceIoControl
WriteFile
ReadFile
GetOverlappedResult
CreateFileW
WideCharToMultiByte
Sleep
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetSystemDirectoryW
RaiseException
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetVersionExA
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
OutputDebugStringA
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetModuleHandleW
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
setupapi
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
??0AdbEndpointObject@@QAE@ABV0@@Z
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??0AdbIOCompletion@@QAE@ABV0@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??0AdbInterfaceObject@@QAE@ABV0@@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??0AdbObjectHandle@@QAE@ABV0@@Z
??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z
??1AdbEndpointObject@@MAE@XZ
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
??1AdbObjectHandle@@MAE@XZ
??4AdbEndpointObject@@QAEAAV0@ABV0@@Z
??4AdbIOCompletion@@QAEAAV0@ABV0@@Z
??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z
??4AdbObjectHandle@@QAEAAV0@ABV0@@Z
??_7AdbEndpointObject@@6B@
??_7AdbIOCompletion@@6B@
??_7AdbInterfaceObject@@6B@
??_7AdbObjectHandle@@6B@
?AddRef@AdbObjectHandle@@UAEJXZ
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ
?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?IsOpened@AdbObjectHandle@@QBE_NXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?Lookup@AdbObjectHandle@@SGPAV1@PAX@Z
?Release@AdbObjectHandle@@UAEJXZ
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?Type@AdbEndpointObject@@SG?AW4AdbObjectType@@XZ
?Type@AdbIOCompletion@@SG?AW4AdbObjectType@@XZ
?Type@AdbInterfaceObject@@SG?AW4AdbObjectType@@XZ
?adb_handle@AdbObjectHandle@@QBEPAXXZ
?endpoint_id@AdbEndpointObject@@QBEEXZ
?endpoint_index@AdbEndpointObject@@QBEEXZ
?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ
?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ
?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ
?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ
?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ
?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ
?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ
AdbCloseHandle
AdbCreateInterface
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetDefaultBulkReadEndpointInformation
AdbGetDefaultBulkWriteEndpointInformation
AdbGetEndpointInformation
AdbGetEndpointInterface
AdbGetInterfaceName
AdbGetOvelappedIoResult
AdbGetSerialNumber
AdbGetUsbConfigurationDescriptor
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbHasOvelappedIoComplated
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbOpenEndpoint
AdbQueryInformationEndpoint
AdbReadEndpointAsync
AdbReadEndpointSync
AdbResetInterfaceEnum
AdbWriteEndpointAsync
AdbWriteEndpointSync
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=116, id=1, productName=Unmarked objects,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=94, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=59, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
AdbWinUsbApi.dll
- IMPHASH fda9f9f5f569ddd0dbf3ad8a275a2eb8
- SHA256 041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407
- MD5 5f23f2f936bdfac90bb0a4970ad365cf
- SHA1 12e14244b1a5d04a261759547c3d930547f52fa3
- SHA512 49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048
- SSDEEP 768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16084
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\code\android\donut\development\host\windows\usb\winusb\objfre_wxp_x86\i386\AdbWinUsbApi.pdb
ole32
CoCreateInstance
kernel32
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
OutputDebugStringA
ExitProcess
LoadLibraryA
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetProcAddress
HeapAlloc
HeapFree
RtlUnwind
GetVersionExA
GetCommandLineA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
Sleep
CreateFileW
WideCharToMultiByte
CreateEventW
CloseHandle
GetLastError
SetLastError
InterlockedDecrement
GetLocaleInfoA
winusb
WinUsb_GetDescriptor
WinUsb_Free
WinUsb_QueryPipe
WinUsb_GetOverlappedResult
WinUsb_ReadPipe
WinUsb_WritePipe
WinUsb_QueryInterfaceSettings
WinUsb_GetCurrentAlternateSetting
WinUsb_Initialize
WinUsb_SetPipePolicy
adbwinapi
?IsCompleted@AdbIOCompletion@@UAE_NXZ
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??1AdbEndpointObject@@MAE@XZ
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?AddRef@AdbObjectHandle@@UAEJXZ
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
InstantiateWinUsbInterface
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=123, productName=VS2005 build 50727, version=50727,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=128, id=1, productName=Unmarked objects,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=73, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=42, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Superuser.apk
- SHA256 8135f47bab91a26adfd563ed4dd22e25f454dfae02a076b6f3cd05604f2068a8
- MD5 65bd72996c68f289c5fa0b81f0874127
- SHA1 ee246d6e91017768e82b2d17e22e4044e4b7da2f
- SHA512 713468d5bce2d42d7d914077a4edc9e2b6d5fef0b657dce302750bb99b4dee3b0859c7722b4ad5b4dc125680f6690c9ee9ecd6baae1bdd21fe927a155765305a
- SSDEEP 12288:vwox9LddQ050PS59VJo1yOjLLfLHNm41awK4OhioC08pYAj4X5yXDn:Iox9XKyOL/tiXoDn
- MD5 SHA1 SHA512 SSDEEP
com.noshufou.android.su
HomeActivity
com.noshufou.android.su.RESPOND
com.noshufou.android.su.provider.READ
com.noshufou.android.su.provider.WRITE
android.permission.INTERNET
android.permission.NFC
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
HomeActivity
AppDetailsActivity
.preferences.PreferencesActivity
preferences.PreferencesActivityHC
UpdaterActivity
SuRequestActivity
PinActivity
TagWriterActivity
.service.ResultService
.service.PermissionsDbService
SuRequestReceiver
com.noshufou.android.su.REQUEST
SuResultReceiver
com.noshufou.android.su.RESULT
com.noshufou.android.su.NOTIFICATION
SecretCodeReceiver
android.provider.Telephony.SECRET_CODE
InstallReceiver
android.intent.action.PACKAGE_ADDED
UninstallReceiver
android.intent.action.PACKAGE_REMOVED
UpdatePermissionsReceiver
com.noshufou.android.su.UPDATE_PERMISSIONS
android.intent.action.BOOT_COMPLETED
.provider.PermissionsProvider
adb.exe
- IMPHASH 9434bcb74195f7025a393fa105630d98
- SHA256 0cf0ddfb585f6d39814103384979730f5cb14b3dcd2c31b72eea542b530eb30d
- MD5 2c25a39086b640b2f83bebc82050b8fc
- SHA1 490037c7b26f567d42d7b15d26c31790d40b4a8c
- SHA512 c06d0892e74a81854097555efad25e0a392605e51812a251e22eb60b0075a566ac2e0d97d80f0d908e9be9d020eb4f2ecb546a34d2bdba944a99fb783b6d8e15
- SSDEEP 12288:bFfNhcDDQrLKz9j87T4WDbHwaqR3Jiv0yn75s+V5dltU7LTKsGsri:bA8JT4WvlrlN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4640
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
CreateEventA
CreateFileA
CreatePipe
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetFileAttributesA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathA
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
ReadFile
ResetEvent
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
Sleep
WaitForMultipleObjects
WaitForSingleObject
WriteFile
msvcrt
_access
_chmod
_getcwd
_getpid
_read
_stat
_strdup
_stricmp
_unlink
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthread
_cexit
_errno
_findclose
_findfirst
_findnext
_fullpath
_iob
_isctype
_mkdir
_onexit
_pctype
_setmode
abort
atexit
atoi
calloc
exit
fflush
fgets
fopen
fprintf
fputc
free
fwrite
getenv
malloc
memcpy
memset
perror
printf
puts
realloc
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strpbrk
strrchr
strtol
strtoul
vfprintf
shell32
SHGetFolderPathA
ws2_32
WSACleanup
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
htonl
htons
listen
recv
send
setsockopt
shutdown
socket
adbwinapi
AdbCloseHandle
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetEndpointInformation
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbReadEndpointSync
AdbWriteEndpointSync
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.stab
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
.stabstr
Size
154KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/4
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/19
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/35
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/47
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/61
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/73
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/86
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/97
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/108
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
generic
busybox
- SHA256 7c88dcbc170c966c8fa763c8996ad3e6f92316794f2e260454c3cec517482922
- MD5 5ea6873c7887cf31aac0bcafb10d7680
- SHA1 2c379b0f373f55fd44e1c8c4802a8d1b049fe2e8
- SHA512 25ee92284812284abcb6fb1bb0a71c3b942bdc2f863fe727b3aa4fa211bb2ddb3c95a929a44d3b5c101e91e8317e2c40867cd87483af787aa0117773f6589c15
- SSDEEP 24576:8kJJEb/l5CH6s0S5+qls8FVDgSOA1RSLakp2mNsh0xAJLhtwN5oOOKSYt7e7uUBG:1WWk2NqaK2y75divByRhkb
- MD5 SHA1 SHA512 SSDEEP
motofail
- SHA256 4298f55d7e24b22061515f02e8856e8a8e9b724ed68ad97aba3172220d64932b
- MD5 5285afb7f3d5cbefe2e3249d69d746ba
- SHA1 272fa14b0865c97ad51935766dec086ced0c6a19
- SHA512 cab2f3170e99505b75025810051ab1fdb8f2a4b749aa51683c6e9e9428fd8f699f6222d480842cf5e1e32bc49770ad4852d3b992ec9d4fb5f29110ee91e07bd0
- SSDEEP 1536:zYQHLbI5jjnHH/EbNtTmesZDRW9e/RHsMaXv14oeX:SfEcR9/ZsQ
- MD5 SHA1 SHA512 SSDEEP
run.bat
- SHA256 36bc0f44a2cbf8e7b09e7277f0ed3383c055e61e8eba0217820bb83cdb10a950
- MD5 1a6d265c8ce3e9cb5e6832688f774717
- SHA1 092da7225c0359b4be35d30e9f7a0c6dfd568c37
- SHA512 73a456899f63ddafa4ff34c2909a68711c9246de4084bd85597e36de5b17dffdf64de2f8d88ea6933208ed5b9eb782f41f39ddd221fb1c1c3f5f788fc49624c6
- MD5 SHA1 SHA512
su
- SHA256 69693318243f119a71e76d5bf6966bd0438152806366885b7c8d956982b0ff3a
- MD5 d1a9de9724c662a50a9a128e48b1fb37
- SHA1 61410f2e93f5a397f8fc3dd51ea04d6e82734615
- SHA512 68a714110b20f7d7aad585d0a0b3d353d16a7624ec47e634991c870d98e5a7998b4f45149cbfbada863d1281ffecadd8a5770066de85523750ed7c075de05828
- SSDEEP 192:t3RAOsWMMeBnMhyiEvxNh4rpAAwKkfm74OKTIeKKKKKKKKKKKKKKKKKKKKKKKKK/:MvWxexD61XYm7hYt
- MD5 SHA1 SHA512 SSDEEP