Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 00:47
Behavioral task
behavioral1
Sample
32a93c51a160f3098aea688d655ba9bb_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32a93c51a160f3098aea688d655ba9bb_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
32a93c51a160f3098aea688d655ba9bb_JaffaCakes118.pdf
-
Size
79KB
-
MD5
32a93c51a160f3098aea688d655ba9bb
-
SHA1
6489704ea50e0d45d4a962ba2dae2e00c4335091
-
SHA256
e00c5f83a4bdc8df2c8cdd6daf524af32074edd4ebde995f52b55a5d02d66c54
-
SHA512
8c8543a952f5b214f428d30935dad154b840e99f370af4d44e43fefc1d285de5938f5ca15120daee1fb7d35ec6e4c51d1167f170d7f8659934950e20cf0ef494
-
SSDEEP
1536:HIK+QM/CJAT2Rm5b+IYJtIibU/1cSOcxB/m1bfFvulA1OuGJs69q04cj0:TU/CJA/x+1tn4J1zWbFvulA3GPP4x
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1928 AcroRd32.exe 1928 AcroRd32.exe 1928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32a93c51a160f3098aea688d655ba9bb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bf1278da574c89d5daa4f521789bea9a
SHA1118b7bd58215566173db8bb20de0393d16915762
SHA256e0938e66369e25e0cffdc24897a62c016254467c44a6a1e824d9a14603aa2745
SHA512016cb92a382ac2b1d91576e2e6fd31d11728762f46c4b2c5a7baeacdcfe5c618c07e8880211048deb503d33cd3a0ab25847ebae9bb2b8556671268a6a5e56f55