Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
19s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
-
submitted
16/04/2024, 12:59
General
-
Target
f38af00c9645fff8992bffd7841de8d5_JaffaCakes118.apk
-
Size
24.3MB
-
MD5
f38af00c9645fff8992bffd7841de8d5
-
SHA1
dff319ddb1cc4c838cead438457b4f5c3640181e
-
SHA256
149beb5fd851b43f5ebc97e277d47cbbc205d49d499eb2cfa0aaa75486d42ebd
-
SHA512
e217c99d32aa0ac237398d4e70f0ee09e8761bafb9e0eb222568a1c444bd43fb729efcf6579924995b5592a6bd33a259afe02a630d5ba6fea54c492f3354f079
-
SSDEEP
393216:0tudagkAo1l4Jgw3WNGd4hpocGxUEtcYzgsnFaH4Jxw7/bl+zf:0HTPNfhpoPH2itsYYrBc
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 8 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device. 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection. 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.lianzainovel1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device.
- Queries information about the current Wi-Fi connection.
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.lianzainovel/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=45 --oat-location=/data/data/com.lianzainovel/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.5MB
MD5539c8e19bac421282e90bc72290b1501
SHA1c1bb8491d554ee9aa1aea7879e58ece97ec3c606
SHA2564934f24bf01772ace9e77c7fbc2da9cea1931de0d1b61e1e89804bf47a02930c
SHA51280cd8af98c4151fb3b95f7b0fc188672ea918c6fc65a2b5879ae8df779f469bb9584a37a5f546cd836d63f2ef8dbeb97e538413ec1a5d64b2e3ae6b5e70e33a8
-
Filesize
6.5MB
MD53088c6aca00c41c1afde77a53c9d581b
SHA1d0fd29d8c9308676a1e0c845de6e3206d8331169
SHA256fd7fe22882d6d4f0c361e53f9f86226ed05fd4a0a16b7172e4e141c8dafa5437
SHA5129ec7bcb02b29299319c47d161acc77b800d8e0cd2e5630152a8131f166d8c4787d86a3f910df43e930c62178a25d9ad9841ca11cf295fd226e7612ddbf9e5fa8
-
Filesize
5.7MB
MD573356abe8d190d3bb19e277a507f1706
SHA1c3430cc8aaad6ae744342a7d431410a95c51ff72
SHA256599717d2d861d4795374158eed0ff2e2b54fa551ba10a2799c51bc0b57362638
SHA512af21ea8055c937aa38088f1a57fdbae7c7a0e35cf38a78c730517d07838be9e5ca558fa15491a0dd08ba3aed59340d5eb7890fc4dc0b1db47521278209ce51df
-
Filesize
6.1MB
MD53ce9a050663287041a2c6bed761838d9
SHA1b5301a64e2fa947c9bc45a7a2844dc41f7964be4
SHA25664ea8a0c3522aa2dd78950f2ba3cbb6a88c22b5cd799664f59ddca2b7f7cbdbe
SHA512a9272f752a3b5882634508ffba460aacc57eaaf41e7cc88058ed99a14310712c51f8e55a306058296de0f669faf9d654f1830eeff7bce4d6a7518431089085fd
-
Filesize
2.1MB
MD57b62f46f3bb071c0a743b96108cbdd00
SHA11fcacf4425bde02055cbae89606b908fe349583b
SHA2563dcf3774b63e911bb5eb3d33ac54b6771f167da55c264ac58742c2ae90186e1c
SHA51215fe7ba8f2bfaeb5084d5da621cd6395045c86bf2362c230797cb09ed50b7ca76070344025034040371236d824649bc441d1039958b373d365eb3f3a01f7c00f
-
Filesize
496KB
MD5f07656a2f51ecb23edc102003c32b764
SHA13ef18f74b609313887b9e825c56a54b5a9eef20e
SHA256f6847402ab69102f8495aac58b9beddde9a71dc52470c5de17e382eec2a6b913
SHA51234b337d2cf98ec3009f80ff299e43984a1c911e5f9eb5942a915915cb7b5b591ffc9f1b79a7989534c2583a703a3f0857e74be68cdd71388f68d5bef354f7238
-
Filesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
Filesize
226B
MD5d7b6f86cb771c53ff50bbefb4a270db4
SHA1d777fc038ce0c9268329e5eff4377920d6621102
SHA2568a6964e4466fcaf9214efb7900754aa55c1018929ba89192cab86ae1c623d3d1
SHA512ecccdfc1ad4567d5f78ed4c3aeeb9a0057231ef3be33853d9f4ce4a3458a4369fe2d43ee4c0bb1c28cccb87965c9a4cecd3f8e3845af9ac6afd2dde789bdaf3b
-
Filesize
226B
MD54b5e8c17613abad7247a1131d79a4fa8
SHA11571eab587a37e49f1ebdfe9a2d825af9f34748c
SHA25692dd83d3b0152de75f275bf75650bfe3c445ecd30d99ea84e70eaadde0b239e4
SHA5126341bdd8dd764fe156c50e34280e57d1b9ba641d6fae5f60726e3a335c7afc232e74efc837f9f91115f00395feba1e31b826b96894ee583841072af93e4f53f3
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5760f06f0f5d129eb8977d6828ae8d464
SHA17824712c2dd2da986023ebf6821c72f5c93e4017
SHA256c964768a7e6185245424613a5a1c5d2f27e5207a124ec5a093524dddac544b43
SHA5126c3d6f579548cb228dc03110999b9a729e6e97663c97e691c7c77eecaeae8f64b7ce15ac16451a9a1a3bb864de027ae02d870b3ec40b53f8195d7b52b9b01f33
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
64KB
MD510b74e47c7e5f71def0e1b6cb72aee44
SHA1b322cd41f39b78ab8c9ec670aed88b38b8dc4426
SHA2565f109ad73b5f9f92a7ee86995dcd7647c26db8a2a382891974ec87d31cf2bcf1
SHA512a96940b0694671effe60eea9425e1aa79b84be53ceea3fbfe942d0c2257dc9d5bf5a3c9fbb230e6d37083f378f80c1e548f4b877b9d9db6ad00056ff76d38b84
-
Filesize
512B
MD578f14bafb0e4828c4ed4e2d51e5dfacc
SHA1c7aea180c3ac98b89e6972e51c8af97ee5e0f623
SHA2560907968be29a5f6a6cbea8765c3a9517ebc8c22c807f57cb51cf300207059886
SHA5122d836d6dcbd69bf13439715438dfeb9539c7d88b51da46be0b4a29e1563fce9045abe92f1cf2585ef40fef84eb888cf8230352335e4a12e22cd8ae69dbc6a448
-
Filesize
68KB
MD52155dc53903b13363b623274053d7776
SHA16c97c9b038c29fdd2f0516d9441dcbeafbb5a7eb
SHA256658b044c5aac4204222332c928c2450edb8284e72ee8a796c4bfb051cc869c5d
SHA5128775a1c8eb3ac1a64b25f59290e3ae211cc0b69be39ff8715495c9cc106908aeddabf15fd6b1e42c91bc124e0b62d870cd1c61fdf4d5cffe68e3145f063136f6
-
Filesize
512B
MD5cea719d7f13f060145b85ee4d4a09fbc
SHA1db073d89daee6b642d7e02752d160c67ddad7b46
SHA25666b09a445cbd6c7be01d1decf93826d0c8a6cf19257a0c2067ad0ed345f99c23
SHA51210e66c508915597385114f74b3e98300b9fc2ea54ea85ca407232974586fabf8b55dc7eaaf71868dff637eaa66326a9279f5e23f3a0ffa4f659a26a8b1b9029e
-
Filesize
24KB
MD51be2bfce69a4537101315d909befb952
SHA1ea5bcbb45a0f829f3c0ce7b8fa8e28eb89bff3fa
SHA256a38a1665bc2f7c9363ae54d76a191ab5c647e11ed9c3f0c509567644f0eddb44
SHA5123ca67eb27c8465b454a3039bb7e43152e90aea33e865e223df063bd696aff1c0f1a8356a248837fe2c4dec92c4644ff7bc45cb96f441baddc5aa88da161d9d3d
-
Filesize
512B
MD5921e9ee068fc69c248c41069fa502652
SHA1a8c628c7ef5ff038dcd3bec58cd2942f4b71a37e
SHA256fbfe740586919f67c959e00075e5be2c4f3600b41899f7fc5876a019fe6f50b2
SHA512e9bad37c6d845eec4b54dd91882147821cc627fa90a9a2aae5ce1e58fd8522b413e09883b0d6c778bdad1c3ca54524f302fd78940e2546bcf7320ac94f82abd5
-
Filesize
16KB
MD538b08dffc1d776d7b3ab667686b9af95
SHA1b56b238b6a86b86ed04bb8ccbf55ef1fc4c1097d
SHA2568899a25932cdd050af826cca8c46107a5e0a0d7b1b0558851e88162441196430
SHA5126d127d866f8a3624066d9b60a77f679a29484a36aeb132aa42dd5fc92c740dad1d79eec7e8bf2fcb72a76dac3f20f82168dff1243e0140dedc73cb1930d8ad0c
-
Filesize
512B
MD5c6e4e4f7e9b8c4fda5cbe42192fd9820
SHA134c02cb7acd5d9d2c40648e9629b49d79e8d561f
SHA256c8ec6bb251a771067a0572b62e66e5f852e1b120dead2b73551f2f07bb8e3978
SHA512cca4f65c76d33288d3734f4b8722575761830119fa2667f6e3986f7cb7aee5e5516b1262c636539b53a872c181b14ee5db3f7e6e035da5aef7c2879cb64e8cc6
-
Filesize
16KB
MD5812486d71bf70e17b9ac9e63252e7333
SHA1dc921c2dd2b4a66079b15f702d306094120335e3
SHA2567a79480fa06de19be22df1dc9f90e63b4998d1f603fdd3739a8591632a4afa36
SHA5122d290ae2621065004aeb50fc52c6c5bc0abc3d2e1f8c73a3518c011d603133370fea75fe21ce691cc8e9c98b00c7365692c0e7019fae6a982421755a5cd2745d
-
Filesize
36KB
MD5f52806377d83779c7319833e2a9b04d3
SHA13eada2f519bc7d536b17ff206431d04f79a173c5
SHA256c8699efa59a76c4632f9f2f2b9899d814d7c2710dea0ec078cea152c1fc84d57
SHA512d8d278b2625e473c7fc414eac4fdec3ea4a471fc50b724a92cdf25a969637ccf762c401d42096ed55c044b9e16a1d8ca4c2438421b50aadb3f29abe686a40c5c
-
Filesize
60KB
MD5f15729b3c7c5bcc46f4ba3623cc9a769
SHA18a991a5e97774b931ad59b3e78110f2c09eb531d
SHA256a2511fe064dcd5c64c08d311745ad7569ef6e147b6c223c1e4eb21ccaabbc292
SHA512cab17996de1ef4d7d1dd847f3a0497eafd9d5f2b4324e8258367acda8b845bc05a56b7af6876ce2dca4d7820076a3d76d63a6fdc75d38739dfd394221677fe88
-
Filesize
52KB
MD506c53709f2eb75053abf74b829a7f3ee
SHA1f64c3c8a3126e31e0a755e366880891502ddc569
SHA256def456ccc0503f5e6d7fb51b7edca676657b81317be0086e886e3e06bc8c27fb
SHA512367fc5632f67eb14f0e19b7eca31118f266a97f34bfad7e0d92be437247ef31caff23e5eddf95489dde9f760143dfa8837d9d172b732cbf3ca1aca7c2bf9857f
-
Filesize
512B
MD502a13a033100e12f49d7453a66701fe5
SHA1651b471a304eb295fbbf563c276689603c5e2bab
SHA256b959a0ac5a78bf44958760c0f5bfc80bfed47c2583c143e5c09de84c3b0e6fec
SHA512bc67c7be276bf20b7db5f630b2ecb394a36e7888114b15fd07f417aecc18b6c0ec28011cd42e00f8aabf88c5226357d8639459f5674ae1dd867aaed67d35a05b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
64KB
MD52abf639c0815c6705d2ab9f22178594c
SHA16751a21c0a595bfb1545c2dc15b5c6f272c4bc71
SHA256a2618d6baaaee1f2b972f408eafb1d28df9d3fb843c430198e4cba67c96adc56
SHA512fca312bfeabff719fd28a858bfea1f8431970e9ab4ac47c6e377da2e454fb08dd0118ce72eb35b48ed857e929f80f5ae433209ddd446385c57cedb0fcfff9b1b
-
Filesize
32B
MD51d014626c1910722baaa309a7b6d8c2e
SHA1f8f52ffe75801d1e1834778d081543483ecbb281
SHA2567b62dcc0b24da90eaf1cfa6a3f5e261ba57f352919a8ff4cae0cb553a4008f9f
SHA51235797c64d2013d8a3073d5a70e1c2b3f88fb065c84159183fc066ce6384ebb2d45069e65a8d8d03b0f4c9bd09bc4e61c42cfb862b2a16caa7939f84a11801309
-
Filesize
340B
MD54488d6a6a76f3a694ec17bfdeb8b4381
SHA19019d5f507d6ed0036bfbaf9917c7a5e3ea5b1d0
SHA256af1e48c453520057f9c61a4e182ce01a7a35ca4a74d801e7624416b1ec3c2bda
SHA512243682ce2eecb7586d5e8306828ee4e82203cf1d3a19a0dfd3b60022b5a66fb5da5089cdda181e79a89afda8236733fed20e0ef47b2f0ff2e9c9a4a67d2a0a88
-
Filesize
32B
MD5b2a4bfcf5ba62ce9495eaddaa00e2360
SHA193fd5ee1a926e239a04761cfc3fbe8aa21023b05
SHA256acfa8dc4c11052e8f03bfd1feaeebda276a2e45e2d089c304fe1d76315e48ab1
SHA512655574005bb00502ba5e213c2a5992661ad16baf95b2f3a196f59acad90cbafea1e1d04e12a9b405feebe55aed5db19a901c19eb7df5f96b686ddb45b34746a3
-
Filesize
100B
MD53c62e02a1e1cd5df74d2c7f2daaa4124
SHA11e041868228c883114807433d10c3d82a2d0881a
SHA256c7a627220ce02dfd59f4824c5a63c996173437aebfc77248475794c429c64066
SHA512e03bb63228f3213068311a478ffaa4337813356c2895389a63f34e3098e9cc1eea90575dfb8027c33ba0883d7543003f442e239fb3207cf4d8e6b9451ffd06a1
-
Filesize
73B
MD538670d488481ec6b93a4d8f6efd706e6
SHA17491db414b028af5e0de7dffce23a6d664296c5e
SHA25629f57e505c57cf05a84c80a0ea99c8a852936b9ae3a6c036f30518dd89535e76
SHA5122c1b9daa937b4266f6f9a5187adf328c05b7eec94c95b00b2ab6e8adacff05a487e04ba33b34db772cfc96a1c2a72221e95fc0f20d34246e8016c808a7a54bb9
-
Filesize
314B
MD5cba69d503cd284f51b6d2dddc89b7d34
SHA1de9e4d4cc106fa9622abbd87de80829607abf268
SHA256f70b910f24cf21da019b04f62ffaed809481d2936d27212644b0f7de335ac35f
SHA51248509864a3a02a1545ad1ce9862f08cbd576b0d28db51a4e41f9c9e2d4994b5a0c5170ff6c764db1b66071c54e402aed2c7cff52a32172e892ffa91ca30e11d4
-
Filesize
27B
MD5dc1e4eb13b7c589487986b1be31b78b2
SHA1826624b6149ce5438956a9b0ffb126a0ff1cf0a7
SHA2566c9114a295abe03aaec306f236221bb2b6b13af17850c7c674a01c7382fd05ed
SHA512a6292232d629164d1215a9080384455fe7414f65c2528fea3b7f81e0d356d33935d673c4e935890c557f7073ad4f9ce49867b374664d2755ce923bba9c7b9bf0
-
Filesize
111B
MD5fdc89421de9d2a8d8384b06942cce197
SHA19f3dc835de9d5b1184759d5ec02cd6a460036f45
SHA256c0059a18985f052dcccae0c2cdd1bb8899f25df3c30ca22755c48d3c06d11e3b
SHA5126e518f800e95a65c0166ec4f4a73a128e5df104eeeb7e7b168afc9ae170ad706f3e1692ea2d7c8c1bea9fb3e0e3e136875919c19a3c9eca6e29ff7ddcceb0be7
-
Filesize
213B
MD520c8fabed31cc1f0322b4ca4184136f3
SHA1a023e8e3a5e7a51763843c50a2943c659a3edf08
SHA256df1f25e9b0060bb87611e315af4f6f27ead241f7a4a2b41c468750a1ae4b16b6
SHA512abef7ce1ff6cf4c522ea799e4ac9cdb603026e5c074af103354a5154ad0437b4f4256d53e2e1c5021598ab81ed9982d8561338b442532779cb4af05090f808a9
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD5b729742caf5676ded53500f02ffa55f4
SHA181b029831cb800d2d820564b749a44077192bd97
SHA256e9c4f8d0de7a475440b8b76272b185e17d20110e23cca26d61e6fb575a91a6ee
SHA512751189446789ce6af84c891d1c522fff68073b067c136bf9e18b4518023c4f44754313184323fae1e3f94205edc447389e1f1741e3373a6780379ea9bffe23c1
-
Filesize
167B
MD5fda86acd34faf68663d0db3c2d70ccbc
SHA1ea3e58625b26d31bb1267f0b8c81a58a1cabd0a3
SHA25698629ec301cf7955fab905cd74dfc2a871b909bca59420eb6f24833af2562e10
SHA51298737c1fbf175fa73cf777342a98b0e52edfb0ac5e65b8ce49c1f3f5ab8fb2add122791b6e8a81241a11a678f7a091e663dc3e595eda1fa5e8f912b6e26a5323
-
Filesize
48B
MD51d8d16c4e3b19ebf18988530d9b9a757
SHA1bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA5124562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
-
Filesize
32B
MD5dad47a544ec0ca01779718994c13fce5
SHA1bde57484f140c4648d28ab9b7b68b7ca87c416f3
SHA2560c14655c10dc6f5d50ecb03713f70295d847718fb3ff6a28ce83e3104a3c381f
SHA512a671f475b15b4fc487675f09190711f7bf02a31db7c8f0eeb5441a8eb9a1cecfd6c4544482784ea8f50b8a242307624f33b7a1a26f80e91833a4cbf8dbc85877
-
Filesize
32B
MD52e75cab89e9f8560c8952325832e4fcb
SHA14a142c2b2417586ebd1ddb056df6b46b2449a071
SHA256431591c4b936d2e5ab86d4651381fe24f03f2e9198b071addf171eb636c3a3cf
SHA512fc6185fdb0888269983efd98beaa92aa042159db9f136d5e030b17d3b4393cd74306ea5d35647c910714b473ae7c6b773af88ff8e58b826c7b98026ef41e67b3