Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 09:26
Behavioral task
behavioral1
Sample
33e47cb9b94f9852902fd5dde2b8db46_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
33e47cb9b94f9852902fd5dde2b8db46_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
33e47cb9b94f9852902fd5dde2b8db46_JaffaCakes118.pdf
-
Size
357KB
-
MD5
33e47cb9b94f9852902fd5dde2b8db46
-
SHA1
b8975deb6b59ca91cc9b8ac16dd5220478986079
-
SHA256
6c9746ef4927b26e896ad349249f95115292b41cbbaca4cf71bea8a9c89bd954
-
SHA512
a3e147bf471dec8873ad7aed5655dc5b2ab1d3864728aa5dcffad51d24ecd00e7439e8f0803d639a0fc443f19cc45a086dfecfbdbacc1184b0372216197f0282
-
SSDEEP
6144:PhC96z72HtThmi+VGFwMMMvZsVwVicSgP8DZvnr4z+1oR084DhcUbcrHuzTNK:U9zBhmtoFnZUying01Pr8+WR084ErHuw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33e47cb9b94f9852902fd5dde2b8db46_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2884
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5944f3e9de4466d7332bac8c7715df4e7
SHA1f6cba6df2019bd6910777b64c8e3fc59ea89483c
SHA256f08cefdeab6b857e7673078eff3170aef22c042392508fb01856b68a0c55aec6
SHA51277fc57862f3012858573836624e684b823c19d4b7224bc8a83e785e99e251dcae7af0a190d052990943646967832323a26cb491f4937a4e4327156cc0dee0370