40a18dfdf58857ac5ab17b6b89d4a80903d1c59d110f9e343f6becab6668d344

Analysis

max time kernel
137s
max time network
142s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
18/04/2024, 05:40

Target

f760fc9f00437a6d19eebdcf559aa77b_JaffaCakes118.pdf
Size

13KB
MD5

f760fc9f00437a6d19eebdcf559aa77b
SHA1

59a5a1d53a168e0fcbba97e98347a03f335bcc2d
SHA256

40a18dfdf58857ac5ab17b6b89d4a80903d1c59d110f9e343f6becab6668d344
SHA512

845113c93408635829b4dc7651f6b7f691c17d6f2bb22866bf41d2c5591686954b004bb31bf27a20186db8cb7245c977da05c0e8b1d015e6c8d2f27ed984febe
SSDEEP

192:5QhzajYqwAO9G+/vCmnmNTy1yJZJ0Zhrx7Rv5VCXHvQNi/60un/TwWzz3:OhzaNwAO9GiCHZLJ0ZhrrkQi/60G7wuj

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28
PID 2316 wrote to memory of 1452	2316	AcroRd32.exe	28

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f760fc9f00437a6d19eebdcf559aa77b_JaffaCakes118.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32 -s C:\Users\Admin\AppData\Local\Temp\wpbt0.dll
  2⤵
  PID:1452

C:\Users\Admin\AppData\Local\Temp\wpbt0.dll

Filesize
40KB

MD5
97c93924341175177b4923b0dfa4143a

SHA1
c55254592bf9af6ade6ce72e41774cd70cbeb495

SHA256
89fcd9b42ec4e427d6764e310856ac8775d3e27f14ed01397a4feed06c567878

SHA512
86426d2d78fc882aa1a50c8701778e6a0aa2a8183fcb8289936dd84f0bdf54656083bcf2825b71cb26ad61104815792059690c50d8d902ca9a16d8e2a9c8512a

Download Submit
memory/2316-0-0x0000000003080000-0x00000000030F6000-memory.dmp

Filesize
472KB

Download
memory/2316-3-0x0000000000E10000-0x0000000000E11000-memory.dmp

Filesize
4KB

Download
memory/2316-4-0x0000000000E10000-0x0000000000E11000-memory.dmp

Filesize
4KB

Download