Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 08:16
Behavioral task
behavioral1
Sample
33f053a5a693f2a835a22a17b3c79438_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33f053a5a693f2a835a22a17b3c79438_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
33f053a5a693f2a835a22a17b3c79438_JaffaCakes118.pdf
-
Size
90KB
-
MD5
33f053a5a693f2a835a22a17b3c79438
-
SHA1
e58ac9d108cfde5afb8b0136790e00eb122a3d93
-
SHA256
47702a2f91bed62e4474bb69f553efa92b5f382eaa7624d39bf2f8d501744bd0
-
SHA512
3b5bcf621ef21d7af78ae35f20ecdaa81db361e0a1c55933e8b12722afabf8c6ec9b3571b29e4b0e6a58cbcc1aa6ebccaecd46021999a511b67b90a832f873bb
-
SSDEEP
1536:WlX+aMeliahvIXLGt1LWdR2PMa2P2SaCgt6xmWmJ9Pzll6mWypOlLFMtWHwZ:rMlvI7Gnq/2PL9CgtzaHlLSWm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2296 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33f053a5a693f2a835a22a17b3c79438_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58b633aecb68ddc47accc5dd0faba8976
SHA154b80d24589f736f5edb7f340e927d9cc0f6a961
SHA2569dc3ed9c83530275bfde7e5c57538fab506f96bc9d39b320ef194fd751b8d891
SHA5125875827c424652e715b946b6222a6d6e1ef7497b9e869ef5e7273b9eb7b8adda87680d856a4bab9f4bb09b5485bee2feec8e24d24387579fd9e0813ce1168e9a