Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 00:57
Behavioral task
behavioral1
Sample
32b03bdb613f9b7877b932aa714410df_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32b03bdb613f9b7877b932aa714410df_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
32b03bdb613f9b7877b932aa714410df_JaffaCakes118.pdf
-
Size
79KB
-
MD5
32b03bdb613f9b7877b932aa714410df
-
SHA1
bc4abe56dff3ad656cf9824cee2e325f00d1cfa9
-
SHA256
60d451d63f7500eac8f6c339fdf9800d1854176488366516729fa4724a561938
-
SHA512
bbfefa859885f83dee5e59f840cad042eb2fd98d7d1cb1be75ab7d6393c52f1ac3723fc8f232731bbe5c45d4407c49f762a3f6fcae50c41afedb5e22f84c2f6f
-
SSDEEP
1536:ELXI3n2tuT5pOw9PTHO95pu5Ie23jjkGS6so5a5Lu3ayRWl3AlPtQxdJyWcpOmGz:c43n2t+5pOmP7RueqjXRud9yS3AZGxr/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2248 AcroRd32.exe 2248 AcroRd32.exe 2248 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32b03bdb613f9b7877b932aa714410df_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5db41d5962efc21d1e29b116f9caf5cdc
SHA12637d1dc46e0f0ddd16ed35a4eb43daf9fc89b33
SHA256bebfea039f9e895ad7490b0f4d7dc177d3cffda6668e0f5df7b5523f40cd54dd
SHA512e0b7497fa77591f21504d77c0409dd2405919100ed31bd032a02b14071bd474573e6758b84a508eec765a9b1713c420d5d3f28a6c424ca28536c96be8cdcd5ca