Analysis
-
max time kernel
95s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10-07-2024 06:35
Behavioral task
behavioral1
Sample
33ad3a75f819cf314f60f01d79e6e8d6_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33ad3a75f819cf314f60f01d79e6e8d6_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
33ad3a75f819cf314f60f01d79e6e8d6_JaffaCakes118.pdf
-
Size
89KB
-
MD5
33ad3a75f819cf314f60f01d79e6e8d6
-
SHA1
370c7d5196f41c2a9d20eae0fc348e7bc878a227
-
SHA256
23d04dcf64c7e30480bf243de8081deb88b69253ccc260b0f93793a9b6325f54
-
SHA512
d35d82c23e92276e43f28964bab8d33b966371eecf0517b45eb0f06bf90abca985751ef4488d754340e2ad69eab832b1a5e5f71019bd5a534e31ebe0535181f9
-
SSDEEP
1536:kk75RLbWsnnzjcSDTrHPdfFBn9u7dmYV1hCUvee6X155gSKelWPAFbWQpOCK6tz6:d/lzdD9ucY3hCUvH8xKeYAFGCK6twyc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2296 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33ad3a75f819cf314f60f01d79e6e8d6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD571b8daf2badd2fb5e590b82fb64bf61b
SHA189b9c8a3ad102725fd0a0f9b396d63754934e9f9
SHA25687feeb2945a1478ad03936b29149fdea137861e664fd74f04d3265282a39ebc4
SHA512b74752fca4190dcc9ec48718e4e8d30f7269913da6c4c3bf2d8c3e5868150be00067ec4392fc72541e543aba6abbabdf4781b3a06940252014a2e71ecee6ec59