Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 19:07
Behavioral task
behavioral1
Sample
3618ac2f834a0d9037af22fe4d09fae9_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3618ac2f834a0d9037af22fe4d09fae9_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
3618ac2f834a0d9037af22fe4d09fae9_JaffaCakes118.pdf
-
Size
52KB
-
MD5
3618ac2f834a0d9037af22fe4d09fae9
-
SHA1
8db7f4eec22dc2f8c0a0baf16e1cb7c992e0e026
-
SHA256
a1aa384d29b168d5d23a57ae912c208752428dbc62d1dcf3aaa60cce27f7ebb1
-
SHA512
3dbaf730763cf8e1211b271196f9820dc492076282e8b867a28508c9ae25f5841e35f280f179026729c9f550d1fab351202f9d15b2f9b92e0f91c5c471ec4144
-
SSDEEP
1536:sGFepjeNVz0r63BtUJRgFXinVaWkuP7+2ce:JFepjeNF9tASynVRv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3618ac2f834a0d9037af22fe4d09fae9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2884
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD506716ed66f066f193a2df38d64843da4
SHA11977952635c561bf2588f42d101eecdaf884cb54
SHA256031637ec9ca68c70f31f97ca20c96e6b081e38634444584fb89f98b62780fd26
SHA512bac7dfacd79ca63ec0b1a9b81b53b54c3d7839190f3114abe95ab37ba1d6c54557713efb153d9af5597469d9ebd3eb6105e5c102dacad7b257d22490eff96e27