Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/05/2024, 23:17
Behavioral task
behavioral1
Sample
1ead9e2b57b1e4bacaaffc0a0a5bd34f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ead9e2b57b1e4bacaaffc0a0a5bd34f_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
1ead9e2b57b1e4bacaaffc0a0a5bd34f_JaffaCakes118.pdf
-
Size
56KB
-
MD5
1ead9e2b57b1e4bacaaffc0a0a5bd34f
-
SHA1
e546a6b217d0c1d5bdd1c46887d99ee1df107962
-
SHA256
b57bc5fdc290bf0c4971cab119877a3c5812cf6f6d743f7d781b2abd27f30a0d
-
SHA512
f32b85b658a007cf3798b9264f8cf59e6c83f7548af065ba00e08d0a96445fc71f8c7dc6ebf6ba0610d6fd899ffcf0e40a3acadfad6195d14d123514035dc249
-
SSDEEP
1536:XcqXsQjCvsgYsda7lkGGciH0B2NcPE4H2Iu96jK8ekDZoI5Io5v8xrjL70XFZmGF:Xcq8KUldACdVWcKTgQffFN5RNAXL7iyq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2328 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2328 AcroRd32.exe 2328 AcroRd32.exe 2328 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ead9e2b57b1e4bacaaffc0a0a5bd34f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2328
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD561f958a163b7af689a2517086f686d31
SHA1d97241fcdbbb0a58107616edc1fc29e2360abb29
SHA256d96c7c91f216ec7453ae166554d47c67d5ae705fabc9f84c1e2755f4c210f7a0
SHA512953bb900e3b5793b7ed6bec498f9222640c71565f8fea6cdc2514c45aa046d8099a169fe2098805ec28a1a99863a3df070d65cb45a8953c425146d9978432aaa