Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 05:45
Behavioral task
behavioral1
Sample
3305158e3a076a99bfebf5a8a4e13c46_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3305158e3a076a99bfebf5a8a4e13c46_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
3305158e3a076a99bfebf5a8a4e13c46_JaffaCakes118.pdf
-
Size
25KB
-
MD5
3305158e3a076a99bfebf5a8a4e13c46
-
SHA1
9cf5adeed3e30f617c3688f5eb9f5f5c10353769
-
SHA256
ae66be448ec66f7c03458de229344f0ec5ffe4572a2252cf22a56975ae1efa2c
-
SHA512
ad595fdbbd64350214bcce8162e6fe904bfc7d10a3604efa693532f4f3ab8f737f67eb27c67552550ba1e4bdcd1fb4dfc8537b28abb82e9883b9fe3753dd3658
-
SSDEEP
768:VzEzPvr+J41TzVXR1Idn9slJbBBdsB5vpS1kJCZOIlbIYWdk2n8NjBoWnaPKhQhg:ar+ifdGF2mK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1940 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1940 AcroRd32.exe 1940 AcroRd32.exe 1940 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3305158e3a076a99bfebf5a8a4e13c46_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1940
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53296a57f5790c4739304db4fea3411ed
SHA18eb7e8467b7047411205910b9a397c640f9fbc94
SHA256d8321ad24bd1e4e7df1629a346fd991bd5af3bbe9a19038de863627ce7e1d337
SHA512f195962eebe3dccfc99003a224fc0887090835bc1ce604aabbe6c72f5bf0803718b0b3e8757f367d5260952a87d996f99ccaa5d2eaa75dfcdc37fffd51105677