Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-05-2024 18:51
Behavioral task
behavioral1
Sample
3087d49b16370f329f3fef290c24357a_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3087d49b16370f329f3fef290c24357a_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
3087d49b16370f329f3fef290c24357a_JaffaCakes118.pdf
-
Size
32KB
-
MD5
3087d49b16370f329f3fef290c24357a
-
SHA1
fa0a2dc00d497d6f7e494f0a6b9bb4fea775e09c
-
SHA256
1cc1ba9de839b855e08649c61ad7247af9324ce5f80f3f480982966ee601acbd
-
SHA512
b8bee10aee18d9a133aa6800bf732521450b79659350ce5a7f77b8d5499bbf99a4f7cfab09f54c36d867aac34a4bd134d34869fc1f77b1e4a709ad5710c9bb4f
-
SSDEEP
768:WgGzpDwpVT3mY/AhdcQTbosiRrHNP0ViAZ2tJEj8YCJ:DGFkpVTmY/AhdclrHqtZ2tJEgYCJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1992 AcroRd32.exe 1992 AcroRd32.exe 1992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3087d49b16370f329f3fef290c24357a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5097b1ec3afbc143c4b4a7e206d11cb60
SHA1114c1bb62b171907d9b2d7d626bf68cda7cee282
SHA2563f6f81c221a3c7042da778f27c9db28d3a066c4fbcaeff619b756780ee85781e
SHA512274a9c8c0f8b3dec6e15de10d867848ebf2e5296800e00c0fcf2f1a92c1ce71011b28023d8ee637831db8773ff78b14b4b30a2a572479ddcdfa50a16e41d3b1a