Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

b12c69c9d1...18.exe

windows7-x64

1

b12c69c9d1...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 01:47 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe

  • Size

    417KB

  • MD5

    b12c69c9d1ee87cbf8cde21b30df431b

  • SHA1

    b46e916024e1861d9f98350566eebdb2040bd585

  • SHA256

    10229915efb85f712ca194f65ea3e71d919b911203413b1068f56fc9f53f2b65

  • SHA512

    e59f6f0634974bd323678454c565c61cbdfe92f4ce93b059d69d27d8d803377f5e6731dfc6e87f0190c47cbcde7ba282e7eaef56332594bc43b7cb85f1808ae8

  • SSDEEP

    12288:Yuq4L2ARhU13JL/DwimyZAEjKWc112if3:jJyAodhr9ZvY12if3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe"
    1⤵
      PID:2652

    Network

    • flag-us
      DNS
      junglenet-a.akamaihd.net
      b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe
      Remote address:
      8.8.8.8:53
      Request
      junglenet-a.akamaihd.net
      IN A
      Response
      junglenet-a.akamaihd.net
      IN CNAME
      junglenet-a.akamaihd.net.edgesuite.net
      junglenet-a.akamaihd.net.edgesuite.net
      IN CNAME
      a803.d.akamai.net
      a803.d.akamai.net
      IN A
      96.16.53.146
      a803.d.akamai.net
      IN A
      96.16.53.158
    • flag-nl
      POST
      http://junglenet-a.akamaihd.net/ah
      b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe
      Remote address:
      96.16.53.146:80
      Request
      POST /ah HTTP/1.1
      Cache-Control: no-cache
      Connection: Keep-Alive
      Pragma: no-cache
      Content-Type: application/x-www-form-urlencoded
      Accept: text/plain
      User-Agent: winhttp
      Content-Length: 273
      Host: junglenet-a.akamaihd.net
      Response
      HTTP/1.1 200 OK
      Content-Type: text/plain
      Access-Control-Allow-Origin: *
      p3p: CP="CAO PSA OUR"
      Content-Length: 0
      Expires: Sun, 16 Jun 2024 01:47:19 GMT
      Cache-Control: max-age=0, no-cache, no-store
      Pragma: no-cache
      Date: Sun, 16 Jun 2024 01:47:19 GMT
      Connection: keep-alive
    • 96.16.53.146:80
      http://junglenet-a.akamaihd.net/ah
      http
      b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe
      728 B
       456 B
       5
      4

      HTTP Request

      POST http://junglenet-a.akamaihd.net/ah

      HTTP Response

      200
    • 8.8.8.8:53
      junglenet-a.akamaihd.net
      dns
      b12c69c9d1ee87cbf8cde21b30df431b_JaffaCakes118.exe
      70 B
       179 B
       1
      1

      DNS Request

      junglenet-a.akamaihd.net

      DNS Response

      96.16.53.146
      96.16.53.158

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.