Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/06/2024, 11:20 UTC
Static task
static1
Behavioral task
behavioral1
Sample
a54315ca13241d050af113a3f0878e14_JaffaCakes118.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a54315ca13241d050af113a3f0878e14_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
a54315ca13241d050af113a3f0878e14_JaffaCakes118.html
-
Size
23KB
-
MD5
a54315ca13241d050af113a3f0878e14
-
SHA1
4b44393c168d2c6b56b047b3f9906038d7b054bc
-
SHA256
700cd3607c6d93dcc0b118a3ebdf7dc7cf92084da60e11bc6ebc0283391bd22f
-
SHA512
b32bf7a4e7c9010a8bd9dce6a13abe23ffc755d616e6dbb1efadbac1ce85c2a55678775a22702c3dd042850dfe3bd94abb61e0986f8ec0e4679d04681a7ee7ce
-
SSDEEP
192:uW7Ib5nd2nQjxn5Q/4nQieDNnVBnQOkEntcenQTbnhnQVCnQtjwMBjqnYnQ7tnIJ:IQ/ZVJ
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a54315ca13241d050af113a3f0878e14_JaffaCakes118.html1⤵PID:2452
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=4180,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:11⤵PID:4752
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4304,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:11⤵PID:1924
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5288,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:11⤵PID:5112
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5300,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:81⤵PID:3596
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5388,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:81⤵PID:4000
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=5292,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:11⤵PID:3600
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=7096,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:81⤵PID:3000
Network
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN Unknown
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN Unknown
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN Unknown
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN Unknown
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN Unknown
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN Unknown
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN Unknown
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN Unknown
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN Unknown
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN Unknown
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestapi.edgeoffer.microsoft.comIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestgoogle.comIN A
-
Remote address:8.8.8.8:53Requestgoogle.comIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN Unknown
-
Remote address:8.8.4.4:53Requestgoogle.comIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN A
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN Unknown
-
Remote address:8.8.8.8:53Request4.4.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request4.4.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request4.4.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request4.4.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request4.4.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN Unknown
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestcdd.net.uaIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN Unknown
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN Unknown
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN A
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
63 B 1
DNS Request
business.bing.com
-
63 B 1
DNS Request
business.bing.com
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
330 B 5
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
8.8.8.8.in-addr.arpa
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
63 B 1
DNS Request
business.bing.com
-
63 B 1
DNS Request
business.bing.com
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
365 B 5
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
-
315 B 5
DNS Request
business.bing.com
DNS Request
business.bing.com
DNS Request
business.bing.com
DNS Request
business.bing.com
DNS Request
business.bing.com
-
280 B 5
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
-
80 B 1
DNS Request
nav-edge.smartscreen.microsoft.com
-
80 B 1
DNS Request
nav-edge.smartscreen.microsoft.com
-
80 B 1
DNS Request
nav-edge.smartscreen.microsoft.com
-
80 B 1
DNS Request
nav-edge.smartscreen.microsoft.com
-
400 B 5
DNS Request
nav-edge.smartscreen.microsoft.com
DNS Request
nav-edge.smartscreen.microsoft.com
DNS Request
nav-edge.smartscreen.microsoft.com
DNS Request
nav-edge.smartscreen.microsoft.com
DNS Request
nav-edge.smartscreen.microsoft.com
-
65 B 1
DNS Request
bzib.nelreports.net
-
65 B 1
DNS Request
bzib.nelreports.net
-
65 B 1
DNS Request
bzib.nelreports.net
-
65 B 1
DNS Request
bzib.nelreports.net
-
325 B 5
DNS Request
bzib.nelreports.net
DNS Request
bzib.nelreports.net
DNS Request
bzib.nelreports.net
DNS Request
bzib.nelreports.net
DNS Request
bzib.nelreports.net
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
73 B 1
DNS Request
api.edgeoffer.microsoft.com
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
365 B 5
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
DNS Request
api.edgeoffer.microsoft.com
-
280 B 5
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
google.com
-
56 B 1
DNS Request
google.com
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
65 B 1
DNS Request
bzib.nelreports.net
-
65 B 1
DNS Request
bzib.nelreports.net
-
56 B 1
DNS Request
google.com
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
65 B 1
DNS Request
bzib.nelreports.net
-
65 B 1
DNS Request
bzib.nelreports.net
-
330 B 5
DNS Request
4.4.8.8.in-addr.arpa
DNS Request
4.4.8.8.in-addr.arpa
DNS Request
4.4.8.8.in-addr.arpa
DNS Request
4.4.8.8.in-addr.arpa
DNS Request
4.4.8.8.in-addr.arpa
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
56 B 1
DNS Request
cdd.net.ua
-
280 B 5
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
DNS Request
cdd.net.ua
-
204 B 3
-
63 B 1
DNS Request
business.bing.com
-
63 B 1
DNS Request
business.bing.com
-
63 B 1
DNS Request
business.bing.com
-
63 B 1
DNS Request
business.bing.com
-
315 B 5
DNS Request
business.bing.com
DNS Request
business.bing.com
DNS Request
business.bing.com
DNS Request
business.bing.com
DNS Request
business.bing.com