Yes, de facto it is copied to the device in to the tmp directory where the file fcc.tar is unpacked, its rights are set, run and finally deleted. Among other things, the ELF file modifies the target file "libDexHelper.so"
The adb authorization itself is still a mystery to me..