Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 04:07
Behavioral task
behavioral1
Sample
333dee0a87b7c419374c20362e654d19_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
333dee0a87b7c419374c20362e654d19_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
333dee0a87b7c419374c20362e654d19_JaffaCakes118.pdf
-
Size
95KB
-
MD5
333dee0a87b7c419374c20362e654d19
-
SHA1
b44f532483b88e998a9b575d592b2200a0465466
-
SHA256
668ebebd816f84165aeead3138ab50e093495fcb3a3bcbdd93f2725ffbc139fa
-
SHA512
7d648555652147cd693619cf55dac443a20e97706eeb777d5bed48c4b8a9a4f83d411b0d6fc0c339294ca98e0d0c2d20548c6c47f16ec79b5a33fc43ecb2b7f4
-
SSDEEP
1536:hnULWbwAYOjfxMFkKM6tsUuiHfR4hCxZS6qc0rBWO0t2OUL+R22eKrWcbRbLmyW0:IW7hjZMFkB6+U1i4xrqBrBYEOx8KrWQl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 280 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 280 AcroRd32.exe 280 AcroRd32.exe 280 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\333dee0a87b7c419374c20362e654d19_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:280
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52781f792c731ae7b5a1677d9d31e5dca
SHA17e0e408ab3be7aab747bb9201147e7e3947a718f
SHA25645902dcc8dae565aa1255e39728f9f1f91dfe378fd3ec9a6a93f3a1dd40cdc34
SHA512586e5e0c44e888344aba6ff06d8fcbce4ec82e5476677abbe349009e042cf8e8daccbbec0b403950fd4aaad5a1dea3c634c9a2cad941aa7213ed18c5708e4bd4