Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

94bae11166...18.exe

windows7-x64

3

94bae11166...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/06/2024, 11:50 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    94bae111661aa4fa57e097a8303aa4ab_JaffaCakes118.exe

  • Size

    100KB

  • MD5

    94bae111661aa4fa57e097a8303aa4ab

  • SHA1

    672fae590206a6aacb884c3531541076c51e063a

  • SHA256

    99735c4a330d80918982b17439527f45a296cf8eadbed9a357f797cc6a80e895

  • SHA512

    84912a88f20c3121cbe502f52f4828005c984eb90c1f271dfd38601a2057d6619bf9bea4c67e0536edbae82de23841dc3ad201dee087c5901dc0bc17b785fa22

  • SSDEEP

    3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\94bae111661aa4fa57e097a8303aa4ab_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\94bae111661aa4fa57e097a8303aa4ab_JaffaCakes118.exe"
    1⤵
      PID:4848
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 224
        2⤵
        • Program crash
        PID:4088
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 4848 -ip 4848
      1⤵
        PID:1980
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4104 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:500

        Network

        • flag-us
          DNS
          144.107.17.2.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          144.107.17.2.in-addr.arpa
          IN PTR
          Response
          144.107.17.2.in-addr.arpa
          IN PTR
          a2-17-107-144deploystaticakamaitechnologiescom
        • flag-us
          DNS
          133.211.185.52.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          133.211.185.52.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          17.160.190.20.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          17.160.190.20.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          95.221.229.192.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          95.221.229.192.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          97.17.167.52.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          97.17.167.52.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          157.123.68.40.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          157.123.68.40.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          198.187.3.20.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          198.187.3.20.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          164.189.21.2.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          164.189.21.2.in-addr.arpa
          IN PTR
          Response
          164.189.21.2.in-addr.arpa
          IN PTR
          a2-21-189-164deploystaticakamaitechnologiescom
        • flag-us
          DNS
          23.236.111.52.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          23.236.111.52.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          240.221.184.93.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          240.221.184.93.in-addr.arpa
          IN PTR
          Response
        • flag-us
          DNS
          14.179.89.13.in-addr.arpa
          Remote address:
          8.8.8.8:53
          Request
          14.179.89.13.in-addr.arpa
          IN PTR
          Response
        • 23.44.234.16:80
          260 B
           5
        • 13.107.253.64:443
          46 B
           40 B
           1
          1
        • 52.142.223.178:80
          322 B
           7
        • 8.8.8.8:53
          144.107.17.2.in-addr.arpa
          dns
          71 B
           135 B
           1
          1

          DNS Request

          144.107.17.2.in-addr.arpa

        • 8.8.8.8:53
          133.211.185.52.in-addr.arpa
          dns
          73 B
           147 B
           1
          1

          DNS Request

          133.211.185.52.in-addr.arpa

        • 8.8.8.8:53
          17.160.190.20.in-addr.arpa
          dns
          72 B
           158 B
           1
          1

          DNS Request

          17.160.190.20.in-addr.arpa

        • 8.8.8.8:53
          95.221.229.192.in-addr.arpa
          dns
          73 B
           144 B
           1
          1

          DNS Request

          95.221.229.192.in-addr.arpa

        • 8.8.8.8:53
          97.17.167.52.in-addr.arpa
          dns
          71 B
           145 B
           1
          1

          DNS Request

          97.17.167.52.in-addr.arpa

        • 8.8.8.8:53
          157.123.68.40.in-addr.arpa
          dns
          72 B
           146 B
           1
          1

          DNS Request

          157.123.68.40.in-addr.arpa

        • 8.8.8.8:53
          198.187.3.20.in-addr.arpa
          dns
          71 B
           157 B
           1
          1

          DNS Request

          198.187.3.20.in-addr.arpa

        • 8.8.8.8:53
          164.189.21.2.in-addr.arpa
          dns
          71 B
           135 B
           1
          1

          DNS Request

          164.189.21.2.in-addr.arpa

        • 8.8.8.8:53
          23.236.111.52.in-addr.arpa
          dns
          72 B
           158 B
           1
          1

          DNS Request

          23.236.111.52.in-addr.arpa

        • 8.8.8.8:53
          240.221.184.93.in-addr.arpa
          dns
          73 B
           144 B
           1
          1

          DNS Request

          240.221.184.93.in-addr.arpa

        • 8.8.8.8:53
          14.179.89.13.in-addr.arpa
          dns
          71 B
           145 B
           1
          1

          DNS Request

          14.179.89.13.in-addr.arpa

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        We care about your privacy.

        This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.