Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
08-05-2024 08:29
Behavioral task
behavioral1
Sample
24028bab923806ff235b9be8a292a0ec_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
24028bab923806ff235b9be8a292a0ec_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
24028bab923806ff235b9be8a292a0ec_JaffaCakes118.pdf
-
Size
57KB
-
MD5
24028bab923806ff235b9be8a292a0ec
-
SHA1
6d30b0f60c0eace43676fd066a5c2fe632f6998e
-
SHA256
3b87b1d0e4f513c924abc50d486d7be2fd9006420a6fa564e6dff56cbb666d74
-
SHA512
924f04cf0ef97106891ae844be7d31fae38307847173c7d282d9f58cde3e251e266746d47756822ce41132a03baa455b866dc0612d24dd9af08f23ef6fea0b7a
-
SSDEEP
1536:cXFZmGWSnAfAlNHSzBZP68I4/E145AecJDVBiNh2JlNlw/m6sZ:KysnAi4Mm5qjgovN2mf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2896 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2896 AcroRd32.exe 2896 AcroRd32.exe 2896 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24028bab923806ff235b9be8a292a0ec_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2896
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5274e820a94b120a0baff12e33a452ec0
SHA1bc48d7fc21e5c1c94c61b9245b3ca14a01ea4eaf
SHA256967763ee7518f188b54c562fc7b981f23dd362fa77a6e80274449499ab04a445
SHA512663895e4d8e9d37e364e9a44a771b8e94b916227ce547cab21f6f3610719dce4fe690b133b68f2bf216338e4c147377fea1c2788e1e18f66657fbf8a81eb05d9