General

  • Target
    droidkit-en-setup.exe
  • Size 19.6MB
  • Sample241110-dmlqmaxpev
  • SHA256 4e7982c1a982141773e2a47f43d0212c6e966457a4f96f7d05f5476d3e18a9af
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • droidkit-en-setup.exe
    .exe 19.6MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 13KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 18KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 46KB
  • $PLUGINSDIR/Help.ico
    187KB
  • $PLUGINSDIR/Setup.ico
    187KB
  • $PLUGINSDIR/System.dll
    .dll 22KB
  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe 982KB
  • $PLUGINSDIR/modern-install.ico
    210KB
  • $PLUGINSDIR/msvcp100.dll
    .dll 593KB
  • $PLUGINSDIR/msvcr100.dll
    .dll 809KB
  • $PLUGINSDIR/nsDui.dll
    .dll 10.0MB
  • $PLUGINSDIR/nsExec.dll
    .dll 17KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 15KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 324KB
  • $PLUGINSDIR/registry.dll
    .dll 35KB
  • $PLUGINSDIR/track_Official-com.txt
    33B
  • $PLUGINSDIR/uninstall.exe
    .exe 8.2MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 13KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 46KB
  • $PLUGINSDIR/SelfDel.dll
    .dll 15KB
  • out.upx
    .dll 5KB
  • $PLUGINSDIR/SkinBtn.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 22KB
  • $PLUGINSDIR/Uninstall.bmp
    22KB
  • $PLUGINSDIR/Uninstall_trash.bmp
    2KB
  • $PLUGINSDIR/bg.bmp
    795KB
  • $PLUGINSDIR/btn_close.bmp
    19KB
  • $PLUGINSDIR/btn_keep.bmp
    140KB
  • $PLUGINSDIR/btn_minmize.bmp
    19KB
  • $PLUGINSDIR/btn_select.bmp
    3KB
  • $PLUGINSDIR/btn_select1.bmp
    3KB
  • $PLUGINSDIR/btn_start.bmp
    130KB
  • $PLUGINSDIR/btn_uninstall.bmp
    135KB
  • $PLUGINSDIR/checkbox1.bmp
    3KB
  • $PLUGINSDIR/checkbox2.bmp
    3KB
  • $PLUGINSDIR/libcrypto-1_1.dll
    .dll 2.1MB
  • $PLUGINSDIR/libssl-1_1.dll
    .dll 389KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 20KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 15KB
  • $PLUGINSDIR/registry.dll
    .dll 35KB
  • $PLUGINSDIR/select_bg.bmp
    59KB
  • $PLUGINSDIR/un.exe
    .exe 7.4MB
  • $PLUGINSDIR/unbg1.bmp
    1.0MB
  • $PLUGINSDIR/unbg2.bmp
    795KB
  • $PLUGINSDIR/uninstall.ini
    52B
  • $PLUGINSDIR/uninstall.ini
    52B

droidkit-en-setup.exe

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 4e7982c1a982141773e2a47f43d0212c6e966457a4f96f7d05f5476d3e18a9af
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
3a:2c:ee:01:44:ff:a8:50:e3:4f:74:3e:64:ae:67:c6:3c:b3:4b:14:f4:57:bc:04:bd:73:8c:f0:6e:b2:b6:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91510100080640090N,CN=iMobie Inc.,O=iMobie Inc.,L=Chengdu,ST=Sichuan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074368656e676475,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Sep 24, 2024

Minor OS version
0
Major OS version
5
Entry point
13333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths