Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
16/04/2024, 18:22 UTC
Static task
static1
Behavioral task
behavioral1
Sample
f40f1611ab3f0f2e68e6510f0dccd9a3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f40f1611ab3f0f2e68e6510f0dccd9a3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f40f1611ab3f0f2e68e6510f0dccd9a3_JaffaCakes118.exe
-
Size
146KB
-
MD5
f40f1611ab3f0f2e68e6510f0dccd9a3
-
SHA1
5059996065bf2851c4ebde7830c91ca88f5fd580
-
SHA256
5c1a093155a50132f6f0c8ae43e3afbeeeca0af19e628b56a674920e71dd987f
-
SHA512
0715f3a760996a97279ec89ad275cdeb0e5b9e0f5ab7a6376b5a315df605f152bc06b58d9ce7fe0b55b232586976b83dc054d39790ee2cb15d3636325f92c3a2
-
SSDEEP
3072:lfzYe0x+5ZHydrsuLcKMvhXL/MkkVtJI3ED3tSG6:lfzYe0xcHydYuLiv54VzI3E96
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request17.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request249.197.17.2.in-addr.arpaIN PTRResponse249.197.17.2.in-addr.arpaIN PTRa2-17-197-249deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request55.36.223.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.154.82.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request25.63.96.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request11.2.37.23.in-addr.arpaIN PTRResponse11.2.37.23.in-addr.arpaIN PTRa23-37-2-11deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request30.243.111.52.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
17.160.190.20.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
249.197.17.2.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
55.36.223.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.154.82.20.in-addr.arpa
-
70 B 156 B 1 1
DNS Request
25.63.96.20.in-addr.arpa
-
69 B 131 B 1 1
DNS Request
11.2.37.23.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
30.243.111.52.in-addr.arpa