Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 16:50
Behavioral task
behavioral1
Sample
359533d82d90f28a798f66f0b49fb35b_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
359533d82d90f28a798f66f0b49fb35b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
359533d82d90f28a798f66f0b49fb35b_JaffaCakes118.pdf
-
Size
53KB
-
MD5
359533d82d90f28a798f66f0b49fb35b
-
SHA1
d4c1be22db6ed96dea976d66fdef65399a48de96
-
SHA256
9740124fda8f3b3462ae22fe94a204b56495bc7a436768d15ce35b78a3756144
-
SHA512
0d8a899b3a848dcd92fef00b90c11c34b84c9bda52692f3121e84a8bfd595a6e9dc63196ef21f8a8faf2ac5f8b0592d3a2dbf39c165b557fcf6a4d80d05da7f9
-
SSDEEP
1536:WGFm11ISOqznIz+9r4xDhO9W+u3igv1VhTi0ms:vFmTIOznrd4xDhOpCVhZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2340 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2340 AcroRd32.exe 2340 AcroRd32.exe 2340 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\359533d82d90f28a798f66f0b49fb35b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fcf42435f426f95cd5c91c948401ee45
SHA1002d9a72593df0e952633f0c8b89c2ab0e9839ee
SHA2569acd6c3ebbadbbfbaffe78a34bc06ff88d1b1e101a5c922c6ab8145cadbf019c
SHA51210988e38083911f6f610a00e171e15df51aecec35d6b7edeffbb23ef3a1871edbebe3f54837b109ac666f018fb6c3e40e7930ae0abb5be66c0d34a0c066ce5ff