Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 05:09

General

  • Target

    446f08cdd2eecdf04530a7419f27130d_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    446f08cdd2eecdf04530a7419f27130d

  • SHA1

    b84ccf53b2ed607567a34acfb38449e6578abfe7

  • SHA256

    0de24a7755f370a6b7d30974f9f92d08e63c620424819cc917b5af07a5c84066

  • SHA512

    32177abd3703db7efdb9fea18b3ad8e223374555e0d9220d06c211ec0fb16d27effd778cbd618e1dce7a899c556be41084d966a44daf79d2ca925552a8dc8384

  • SSDEEP

    384:DLEMMLEtysyXlYDi3AYDi3Jt+wBMlxrV98pRPFOF++:Dg/gE/SSxz3

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\446f08cdd2eecdf04530a7419f27130d_JaffaCakes118.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2728-0-0x0000000003BB0000-0x0000000003C26000-memory.dmp

    Filesize

    472KB

  • memory/2728-3-0x0000000000C60000-0x0000000000C61000-memory.dmp

    Filesize

    4KB