Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 08:03
Behavioral task
behavioral1
Sample
2e238f3690f147c2c94551cfe0540f05_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2e238f3690f147c2c94551cfe0540f05_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
2e238f3690f147c2c94551cfe0540f05_JaffaCakes118.pdf
-
Size
358KB
-
MD5
2e238f3690f147c2c94551cfe0540f05
-
SHA1
0633ee68aba1e1341ede6ca94cafce338f7c3342
-
SHA256
dfad4d9c3676fd8b1f4feb99cf7f9c017bbd2d0324eee945bc5e9f5b4caffa43
-
SHA512
b478ad057ffe3ba7c0447e9798150d6ad4a1e74bedc3c7c1ecf71eb640600afc71738120c802245ff0b55097a0aece0d2de5b55444bf6b0292985e5657708ef7
-
SSDEEP
6144:rn1B8waYOGjnohGT35JxfQ9LlcWPmGBnHuMTbXizW1qINg45Jdkot/x:b1iwrjsGdXo9VOKnOMTbXizWIB45nxtp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1796 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1796 AcroRd32.exe 1796 AcroRd32.exe 1796 AcroRd32.exe 1796 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2e238f3690f147c2c94551cfe0540f05_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1796
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59ad069c616a5dec39caee981d8080b57
SHA11beb6d0ec017522e6b74efe824e4b8834994b4c3
SHA256cac99c3581c1010c7a849efc25318b0b521a365f73a723ce997e80774120dde7
SHA51270f9e92a64179c70cb991bcdffc27473504dcea77aeccff983c1f85f4ef39bafe6224dc3e9a2a6a4b71e3d8b28ed83c27297fc77e79a3eab48f9e074593ee217