Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 08:33
Behavioral task
behavioral1
Sample
a00c33d73a4941e6eeaef135d3e296ca_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a00c33d73a4941e6eeaef135d3e296ca_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a00c33d73a4941e6eeaef135d3e296ca_JaffaCakes118.pdf
-
Size
186KB
-
MD5
a00c33d73a4941e6eeaef135d3e296ca
-
SHA1
e770e54fa3cefcec4cb734fd36a1b673af70633d
-
SHA256
0f305b2d243b1a33afbab18dbf279c5ff8a4a63a6e87f55293deab241fb93726
-
SHA512
3a5b95e5de7d9534597ba2d4ba190048df63ffa64b82173901331c78b757114d3cae6fba89a7ea0f26af5416c1b4cefc187b542b09aa45d68928ffb11c878a56
-
SSDEEP
3072:/2irbxzGAFYDMxud7fKg3dXVmbOn5u06Kjn699VV8PP0DHQrdAue/MMS/:/2MKlWQ7Sg3d4bOJq4Vqs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1740 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1740 AcroRd32.exe 1740 AcroRd32.exe 1740 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a00c33d73a4941e6eeaef135d3e296ca_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5914f1b9b0147a09b8d9e152dbfc77fd7
SHA111c4c28fdfb5b34787c974a23f0e2d7be9fbbaa0
SHA256d8066c3450ad55a3b7663ced3f4774b62a524b24ee3a729ede991ba29a6788da
SHA512fbccf16508872c48a7468e1e597d3cc3a8270f29aaa3f2746a3fe7d844d6276778791932002e1522767627d797ccf4b9e274a9f600ba5d24f84d559d421ab375