Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 00:15
Behavioral task
behavioral1
Sample
373fa159c5eea744c9631787510a9ec3_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
373fa159c5eea744c9631787510a9ec3_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
373fa159c5eea744c9631787510a9ec3_JaffaCakes118.pdf
-
Size
40KB
-
MD5
373fa159c5eea744c9631787510a9ec3
-
SHA1
ba2f97af50c59345108836cc55ab19c69b4b2e12
-
SHA256
9282e94931bb88624c0383196a6768bb9b9a39a14a0f272a7f7244d6c11dde3c
-
SHA512
1a6190673658d5e5ae383f896dad052ecf63c6c76f149162e70e7cbd6792620a1842386cd45b490949dfccc1b8788dd7a4ca3ecdf353991177ad540d06e5cde5
-
SSDEEP
768:9XuMZmwgCLWarclpRRUBq4hVmnXntQ17tKJPeWZmp8rvcBCxEcja:9XFZmGWSipRRUBB6XW7IVyBCxJa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\373fa159c5eea744c9631787510a9ec3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54d2f9ce4808ca66a736d6978a416d749
SHA10610ed41fab89fb1837eb4d3d85c18de59726a29
SHA25651f04fc16633e7a2b6573b81be847d4e69eb130332ca6573df9553291ee176f1
SHA5127ac7b02ea0f7fef569c0e953fb04ee98672d1b142787afcafa8fb9700cfb8a36bec5d18bfbf606ca1f2254964df62a0dc5893045520b6c21d7baf1dcb2a64edd