Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
29/04/2024, 12:31
Behavioral task
behavioral1
Sample
07ac6e39fdb3e77af374dcb477b1a58d_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
07ac6e39fdb3e77af374dcb477b1a58d_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
07ac6e39fdb3e77af374dcb477b1a58d_JaffaCakes118.pdf
-
Size
12KB
-
MD5
07ac6e39fdb3e77af374dcb477b1a58d
-
SHA1
d54e3d8e2ef315a47efc1efabf5ebb2f3fdcbefb
-
SHA256
2b60a680b373dc3191cec5f4827223a3372b46a7de4ce2e83ad3a080c947d379
-
SHA512
c55a8611023f757cd8cab6b11f6651ad9a53042a2c2f646506bf0c4a67d415c363dd9ae9c8745ef639f7726c1d0a5779bea0b51b13c504273b76651a3cb3385f
-
SSDEEP
192:WJNmPXMC7QxBqcYva4AJate+8YtOp3qE6asjIbZ9p5L5Zf/voShknLeHj+X93aXE:WLIaIc083qE6fMLvATgyX93RX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2488 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2488 AcroRd32.exe 2488 AcroRd32.exe 2488 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07ac6e39fdb3e77af374dcb477b1a58d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2488
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57ac6a8fa702401b6bf4f0caa6270b394
SHA183c9d3cb8f3af82c0bdce5e10b48e30b7a2c7f39
SHA2561dabd8dee509be3c4cbd9a9e40d6ef5c216859427383bd63fa0cf1ab9c781131
SHA512fe4f18f0c7839bd717e2a32fc4b144ee906a4fe33a6fc2a6788fba184e0a84e12c9d91b5c46f3c741bcfe486af0eb3dd2e0add674f1485b96b5d2ea2d0a8fea2