Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10-07-2024 01:01
Behavioral task
behavioral1
Sample
32b403f1990ca9bd9971f32e68835a9a_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32b403f1990ca9bd9971f32e68835a9a_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
32b403f1990ca9bd9971f32e68835a9a_JaffaCakes118.pdf
-
Size
40KB
-
MD5
32b403f1990ca9bd9971f32e68835a9a
-
SHA1
00fef406a8efc5bd73a522bce767adec10381ced
-
SHA256
3b6585d8897cdd47fa41f226b8b25a90e7b4c664632286bf2a093d7f0a5a78bf
-
SHA512
30c442d08a7fdac7da32b4a16f45de7ea94b4d897b5437ff34a96a44c59c0396db912ce1cfdcd435c25e3eaca54542634b55199ab4cd7373de2b0834024bbcc8
-
SSDEEP
768:46HCeQYjtv9Ne9pdvSIocdbXFgg1xJqZcCsCeH063MPjG5fgTAhlu6wW1:9ieQ9dhFgg1xJ0MqGN28wW1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2676 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2676 AcroRd32.exe 2676 AcroRd32.exe 2676 AcroRd32.exe 2676 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32b403f1990ca9bd9971f32e68835a9a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2676
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5eee2bb3623757efdba8998b1dac6e09d
SHA116f5f6c6b0ef9e17f03bd85376621a3bc6a3a65c
SHA256f5f2258e67e6615a5e08be83eac8318fed7c932d65ab38e6190268d8fd5e0753
SHA51239b39049743c38a81408707267d2f116553c6ab5cb9bb9c7e8067a748214d7558c73e8c31de0538d505feb1088c8b2379d80a8c12598e0c637221575144bb276