Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    RetracPatcher.exe

  • Size

    83.2MB

  • MD5

    d8b516ccd538b7fb0b43887437955737

  • SHA1

    80682e6da24c2f43efea4a7c122c8622a083e901

  • SHA256

    55309a4905c0c074bb9b488a58314dc58d89dea1a8f6963a367c3a62110592c6

  • SHA512

    12c017f28753e859ae13127edb9a859c299d6567d5529d72c01293d7fc949d16f2c2c32edcc720765aea66457807757973ef1d4ecf2a3b74b2108dfed668a42d

  • SSDEEP

    1572864:DC/xlZ1DRUH32qZ0QaTY5pONinTIXK7hqsAyUhEvpPLjjW:DYTAPO4nsayyUmxPLW

Score
10/10

Malware Config

Signatures

  • Zloader family
  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • RetracPatcher.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SpiderBanner.dll
    .dll windows:5 windows x86 arch:x86

    90179d905cdca282880541c826651c15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • OGFnPatcher.exe
    .exe windows:10 windows x64 arch:x64

    542d8a80a99fa25756bab2f5cbeff106


    Headers

    Imports

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:10 windows x64 arch:x64

    91b8685f04cd4eceae98e68aec559609


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app.asar
  • resources/app.asar.unpacked/node_modules/sqlite3/LICENSE
  • resources/app.asar.unpacked/node_modules/sqlite3/build/Release/node_sqlite3.node
    .dll windows:6 windows x64 arch:x64

    04084d643c609dec5b942b355cf5584d


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/sqlite3/deps/common-sqlite.gypi
  • resources/app.asar.unpacked/node_modules/sqlite3/deps/extract.js
  • resources/app.asar.unpacked/node_modules/sqlite3/deps/sqlite-autoconf-3440200.tar.gz
    .gz
  • sqlite-autoconf-3440200.tar
    .tar
  • sqlite-autoconf-3440200/INSTALL
  • sqlite-autoconf-3440200/Makefile.am
  • sqlite-autoconf-3440200/Makefile.fallback
    .sh linux
  • sqlite-autoconf-3440200/Makefile.in
  • sqlite-autoconf-3440200/Makefile.msc
  • sqlite-autoconf-3440200/README.txt
  • sqlite-autoconf-3440200/Replace.cs
    .js
  • sqlite-autoconf-3440200/aclocal.m4
    .ps1
  • sqlite-autoconf-3440200/compile
  • sqlite-autoconf-3440200/config.guess
  • sqlite-autoconf-3440200/config.sub
  • sqlite-autoconf-3440200/configure
    .vbs
  • sqlite-autoconf-3440200/configure.ac
  • sqlite-autoconf-3440200/depcomp
  • sqlite-autoconf-3440200/install-sh
    .sh .vbs linux polyglot
  • sqlite-autoconf-3440200/ltmain.sh
  • sqlite-autoconf-3440200/missing
  • sqlite-autoconf-3440200/shell.c
  • sqlite-autoconf-3440200/sqlite3.1
  • sqlite-autoconf-3440200/sqlite3.c
  • sqlite-autoconf-3440200/sqlite3.h
  • sqlite-autoconf-3440200/sqlite3.pc.in
  • sqlite-autoconf-3440200/sqlite3.rc
  • sqlite-autoconf-3440200/sqlite3ext.h
  • sqlite-autoconf-3440200/sqlite3rc.h
  • sqlite-autoconf-3440200/tea/Makefile.in
  • sqlite-autoconf-3440200/tea/README
  • sqlite-autoconf-3440200/tea/aclocal.m4
  • sqlite-autoconf-3440200/tea/configure
    .vbs
  • sqlite-autoconf-3440200/tea/configure.ac
    .sh linux
  • sqlite-autoconf-3440200/tea/doc/sqlite3.n
  • sqlite-autoconf-3440200/tea/generic/tclsqlite3.c
  • sqlite-autoconf-3440200/tea/license.terms
  • sqlite-autoconf-3440200/tea/pkgIndex.tcl.in
  • sqlite-autoconf-3440200/tea/tclconfig/install-sh
    .sh .vbs linux polyglot
  • sqlite-autoconf-3440200/tea/tclconfig/tcl.m4
  • sqlite-autoconf-3440200/tea/win/makefile.vc
    .vbs
  • sqlite-autoconf-3440200/tea/win/nmakehlp.c
  • sqlite-autoconf-3440200/tea/win/rules.vc
  • resources/app.asar.unpacked/node_modules/sqlite3/deps/sqlite3.gyp
  • resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3-binding.js
  • resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3.js
    .js
  • resources/app.asar.unpacked/node_modules/sqlite3/lib/trace.js
    .js
  • resources/app.asar.unpacked/node_modules/sqlite3/package.json
  • resources/app.asar.unpacked/node_modules/sqlite3/src/async.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/backup.h
    .js
  • resources/app.asar.unpacked/node_modules/sqlite3/src/database.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/gcc-preinclude.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/macros.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/statement.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/threading.h
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    4281dc6a4061c17c72b1d64db5243928


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall OGFnPatcher.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.