Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 00:54
Behavioral task
behavioral1
Sample
31ea1cdac7002ef658bacb9c4ae8d8da_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
31ea1cdac7002ef658bacb9c4ae8d8da_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
31ea1cdac7002ef658bacb9c4ae8d8da_JaffaCakes118.pdf
-
Size
39KB
-
MD5
31ea1cdac7002ef658bacb9c4ae8d8da
-
SHA1
cdf15257a56a58e83ae5b4800183ca4777e1bdd7
-
SHA256
98b97fbef0d9a0a70176f20cfd6c37325bd9edb8057eddc8a2a26d06925194a9
-
SHA512
cbae137ed3154eae4fdb3b011b4928b38dbf8cd8fd6043a47be25075ac015c0136836f32d93dbb07513fea4c86df815567f5103f3a1ece3b51260ffe8c649c2e
-
SSDEEP
768:qXuMZmwgCLWarnE5Hpxoiu0U0s2uQdyqb4R0CoNDijYDzEWrzNyUwTCOjszs+8wE:qXFZmGWSQjoiu0U0s2uQdyqbnC+N3EWQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2068 AcroRd32.exe 2068 AcroRd32.exe 2068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\31ea1cdac7002ef658bacb9c4ae8d8da_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2068
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5df695377a9b628c95278e813347743cc
SHA178d33de2f52758841bedbda757db2baa94b668c1
SHA25611a460a8c3ff96e2cba5d2de7045d59f616a14a32e6f94f12cc88e8af14387a6
SHA5129138599f86cbf35ccc10f274da273d340bff145635fa21a1a565d8ada02ee91844c29f4da76dbdff83a3495b713f1d06d24613105f7435ed81ad1776ead55a5a