General

  • Target
    droidkit-en-setup.exe
  • Size 19.5MB
  • Sample260705-pdefqsct4v
  • SHA256 ababd93e9650eaa5ee657813bc9e33515dd10acc5a900592bb1ba36b6a3165fa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • droidkit-en-setup.exe
    .exe 19.5MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/Help.ico
    187KB
  • $PLUGINSDIR/Setup.ico
    187KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe 982KB
  • $PLUGINSDIR/modern-install.ico
    210KB
  • $PLUGINSDIR/msvcp100.dll
    .dll 593KB
  • $PLUGINSDIR/msvcr100.dll
    .dll 809KB
  • $PLUGINSDIR/nsDui.dll
    .dll 10.0MB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 313KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/track_Official-com.txt
    33B
  • $PLUGINSDIR/uninstall.exe
    .exe 8.1MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/SelfDel.dll
    .dll 5KB
  • out.upx
    .dll 5KB
  • $PLUGINSDIR/SkinBtn.dll
    .dll 4KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/Uninstall.bmp
    22KB
  • $PLUGINSDIR/Uninstall_trash.bmp
    2KB
  • $PLUGINSDIR/bg.bmp
    795KB
  • $PLUGINSDIR/btn_close.bmp
    19KB
  • $PLUGINSDIR/btn_keep.bmp
    140KB
  • $PLUGINSDIR/btn_minmize.bmp
    19KB
  • $PLUGINSDIR/btn_select.bmp
    3KB
  • $PLUGINSDIR/btn_select1.bmp
    3KB
  • $PLUGINSDIR/btn_start.bmp
    130KB
  • $PLUGINSDIR/btn_uninstall.bmp
    135KB
  • $PLUGINSDIR/checkbox1.bmp
    3KB
  • $PLUGINSDIR/checkbox2.bmp
    3KB
  • $PLUGINSDIR/libcrypto-1_1.dll
    .dll 2.1MB
  • $PLUGINSDIR/libssl-1_1.dll
    .dll 389KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/select_bg.bmp
    59KB
  • $PLUGINSDIR/un.exe
    .exe 7.4MB
  • $PLUGINSDIR/unbg1.bmp
    1.0MB
  • $PLUGINSDIR/unbg2.bmp
    795KB
  • $PLUGINSDIR/uninstall.ini
    52B
  • $PLUGINSDIR/uninstall.ini
    52B

droidkit-en-setup.exe

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 ababd93e9650eaa5ee657813bc9e33515dd10acc5a900592bb1ba36b6a3165fa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
72:8f:9b:19:fa:7d:93:07:38:3d:e2:a0:5c:d4:b0:1c:e8:92:22:48:ba:24:a9:24:00:00:8a:13:ef:82:ed:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510100080640090N,CN=iMobie Inc.,O=iMobie Inc.,L=Chengdu,ST=Sichuan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074368656e676475,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
5
Entry point
13333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths