Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 06:00
Behavioral task
behavioral1
Sample
33906c5236276af386d431ed743df85f_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33906c5236276af386d431ed743df85f_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
33906c5236276af386d431ed743df85f_JaffaCakes118.pdf
-
Size
34KB
-
MD5
33906c5236276af386d431ed743df85f
-
SHA1
c0e4aeca8904c5ff583ffe0b2c249e7a04fe64c5
-
SHA256
516f2e4e9054d7f61cf16e09f35ff4b06b60a5f0b270491912a07b02740d8232
-
SHA512
f74e65702d15635c62780f96edb9b4a65524f1b7aa3729e4b2a9d2329ee3735b779dcd0a2090439098013b4abb9512ec944ffc12242aa513d0a1e0e95aeb2af1
-
SSDEEP
768:/5j+i7+hvow1zBGk1ogKxguMTKOsLzs+L9:/0i7FOzBhxKxgbTK5BL9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33906c5236276af386d431ed743df85f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57702b751a58be8ba2e635b9748a4b8e9
SHA1e9064f2de559cc43bd32a9861876d97a796b9c10
SHA2563bdda0897806d6318760694d6bff13d1c2551582e612f3849e2cd82b5e7a6c00
SHA512aa7ae80c1fd16db5abd153bedac5d812e143b1fa479d172b2f5e6f25b8891564ac4d47daf56c567fb59a32e3a3dc8a6c1b2f66fdbd10199535060cbceb5939eb