Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10-07-2024 01:27
Behavioral task
behavioral1
Sample
32c7669c7d6ee95c43a98f30604ce2ba_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32c7669c7d6ee95c43a98f30604ce2ba_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
32c7669c7d6ee95c43a98f30604ce2ba_JaffaCakes118.pdf
-
Size
89KB
-
MD5
32c7669c7d6ee95c43a98f30604ce2ba
-
SHA1
f9abe461b9793ce3cf3dfc24c4a714cd913f96af
-
SHA256
2ee65a16207ad223c018017bdc0c4f958b713d4077331aa90e8fd968b07a662b
-
SHA512
bab3b80d7b29942fc878fc8344f54e5f466c84bbb1557f787bcfc338c287b32f138aace8765c1382d293c0dfc21dfbf46a8a75949b07cacf56563b01045c8c15
-
SSDEEP
1536:14qXvripihV+cX0kv92hXljA7qei4jdQ+nRWapOn6WUmkv1VIRsoMk:GwrichVv0U0ljA4od5SnOssk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2112 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2112 AcroRd32.exe 2112 AcroRd32.exe 2112 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32c7669c7d6ee95c43a98f30604ce2ba_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2112
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ec4ec08ac883e15e3039e7e4ebdbbf39
SHA111845a5cdeb201bd49ddc089cb1f2c15742710af
SHA256b0885926612be544cdb8341c10cd7d3863a44d9ad506ce8c9d6d31a172b7e2df
SHA5120c65a73d653bc2d329014c3797ddf42bb0c49a64eb72a4028dcaccd9d7d9cf8bc84857c2390a8f4e28d31ec351f87598658fd15a755fad1ad1ad84700a441ff9