Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Badlion Client Setup 4.3.2.exe

  • Size

    120.7MB

  • MD5

    cfe2dfeb287235b298536f7f85529716

  • SHA1

    fa95bce06fdae9740c6e0baa4253e46fbf8db34a

  • SHA256

    c1c841f7ae265fa8f6dd73b3daea133766f035e9a064afe268732c3e08bca321

  • SHA512

    7bc5d47e45d4a3eb2a9b5c8789b4cf344b42d9ca4acc3de8df90443cde1a77d087b0915ffd9524c77badddee10b393cb8f99e2067765d1fdd71902f976c05762

  • SSDEEP

    3145728:teTm4rKi1QPC7bY+wMOM0RN/dkdqOsHE1Zns6X7y7URu0:wC4rLQ0bTwa4N/+qOsk1ZnsmmUo0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • Badlion Client Setup 4.3.2.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    d09878220c1fdc2c2325ac1b89d388da


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • Badlion Client.exe
    .exe windows:10 windows x64 arch:x64

    983b39e89e31e09b145fe6a6c7499ffb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • VMProtectSDK32.dll
    .dll windows:5 windows x86 arch:x86

    b9f19b4d3ce951c4ff6196681bbb3439


    Headers

    Imports

    Exports

    Sections

  • VMProtectSDK64.dll
    .dll windows:5 windows x64 arch:x64

    1851ff453adce0cef5274e320d5bed3c


    Headers

    Imports

    Exports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    63aed44aa4215730d764b1a62510b722


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cursors/col_resize.cur
  • cursors/col_resize.png
    .png
  • cursors/copy_drop.cur
  • cursors/hand_grab.cur
  • cursors/hand_grab.png
    .png
  • cursors/hand_grabbing.cur
  • cursors/hand_grabbing.png
    .png
  • cursors/invalid.cur
  • cursors/link_drop.cur
  • cursors/move_drop.cur
  • cursors/row_resize.cur
  • cursors/row_resize.png
    .png
  • cursors/zoom_in.cur
  • cursors/zoom_in.png
    .png
  • cursors/zoom_out.cur
  • cursors/zoom_out.png
    .png
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • discord-rpc.dll
    .dll windows:6 windows x64 arch:x64

    293914ac82b04d32c243e6e36fe73039


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:10 windows x64 arch:x64

    91b8685f04cd4eceae98e68aec559609


    Headers

    Imports

    Exports

    Sections

  • ffmpeg.exe
    .exe windows:4 windows x64 arch:x64

    35e5986755f35a61c28c2152e42c4bf0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:6 windows x64 arch:x64

    cc3ae7cd596d466eba226430bccc07d3


    Headers

    Imports

    Exports

    Sections

  • libs/caffeine-2.8.8.jar
    .jar
  • libs/disruptor-3.4.2.jar
    .jar
  • libs/joml-jdk8-1.9.25.jar
    .jar
  • libs/lz4-java-1.7.1.jar
    .jar
  • libs/optifineinstallwrapper.jar
    .jar
  • licenses/aperature.license.txt
  • licenses/autofriend.license.txt
  • licenses/autotip.license.txt
  • licenses/badlion.licenses.txt
  • licenses/caffeine.license.txt
  • licenses/cairo.font.license.txt
  • licenses/chromium.license.txt
  • licenses/discord.license.txt
  • licenses/disruptor.txt
  • licenses/ffmpeg.license.txt
  • licenses/ffmpeg.readme.txt
  • licenses/flag-icon-css-license.txt
  • licenses/freetype-jni.license.txt
  • licenses/freetype.license.txt
  • licenses/grpc.license.txt
  • licenses/licenses.dependencies.txt
  • licenses/licenses.txt
  • licenses/lunatriuscore.license.txt
  • licenses/lz4-java.license.txt
  • licenses/mclib.license.txt
  • licenses/nan.license.txt
  • licenses/nativefiledialog.license.txt
  • licenses/notenoughupdates-repo.license.txt
  • licenses/notosansjp.font.license.txt
  • licenses/notoserifkr.font.license.txt
  • licenses/notoseriftc.font.license.txt
  • licenses/openjdk.license.txt
  • licenses/opensans.font.license.txt
  • licenses/quickplay.license.txt
  • licenses/replaystudio.license.txt
  • licenses/rubik.font.license.txt
  • licenses/schematica.license.txt
  • licenses/skyblockaddons.license.txt
  • licenses/skyhelper-networth.license.txt
  • licenses/slim.license.txt
  • licenses/tiny-process-library.txt
  • licenses/xdelta.license.txt
  • licenses/xxhash.license.txt
  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    c3bac5b277d6a19414754b3ea09dbe12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • native-modules/badlion_electron.dll
    .dll windows:6 windows x64 arch:x64

    ccd17c92314b3c35a5da7791c4a13d47


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • native-modules/badlion_js.dll
    .dll windows:6 windows x64 arch:x64

    8c53daffcaed1ae8baad0ab252189ea9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • native-modules/freetype-jni.dll
    .dll windows:6 windows x64 arch:x64

    7e222087c1801e9cf8b3a8e2524f0523


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • native-modules/launcher.node
    .dll windows:6 windows x64 arch:x64

    4c4381b0f4b6f517e985ba17f18d0c11


    Code Sign

    Headers

    Imports

    Sections

  • psapi.dll
    .dll windows:10 windows x64 arch:x64

    e28a29f487e67339224e61ab69baf7f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • resources/app-update.yml
  • resources/app.asar
  • resources/debug-log4j2.xml
    .xml
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Code Sign

    Headers

    Imports

    Sections

  • resources/roots.pem
  • snapshot_blob.bin
  • ssleay32.dll
    .dll windows:6 windows x64 arch:x64

    5785b35a3ba4b9dacdb6c066b0dc1528


    Headers

    Imports

    Exports

    Sections

  • ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    20eff1c9c7212dc9a4d9efa40ff6594c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin
  • vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    155af8b051ca03256aa6577e28579703


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    f49ac71a58dd00b20fff27fd20515fff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:6 windows x64 arch:x64

    2f512fb5f6e9b43a254e4cf878ac952d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall Badlion Client.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.