Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 02:56
Behavioral task
behavioral1
Sample
37e35b743c50261c410383bcebb0b1d2_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
37e35b743c50261c410383bcebb0b1d2_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
37e35b743c50261c410383bcebb0b1d2_JaffaCakes118.pdf
-
Size
36KB
-
MD5
37e35b743c50261c410383bcebb0b1d2
-
SHA1
c63d7ce12f66eb831f2fe364793ed5d478d7903a
-
SHA256
c60a8525969bfaf526e30484c16cfbb4fa99e4b9ef63dd95ae82b4cb4014a824
-
SHA512
b74a1ac199c996be1ca6dd371a77809f2c6e526610ff100b8401fab9a48687c1178ed22b27985aab4937ba38b4fddfd55eab1d7224005711d60563cf8e0773c9
-
SSDEEP
768:UI949obkDva+reQj0OXyx1Nhl2b1waVzVTik1WPbVVGJm/umDQyacFX20PE5jAXY:Uy4daYd0OXyx1Nhl2b1wszVTik1WPbVq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1264 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1264 AcroRd32.exe 1264 AcroRd32.exe 1264 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37e35b743c50261c410383bcebb0b1d2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e344a226fbeb37654ab25c58eb643643
SHA1818e10533151406c6845685f40047bd73ae2f0f5
SHA2567721a25bfe3f04bf18398e4c17d8490d1fccfc60decf6124b36c5ca9d400b1a6
SHA51237f1d2cacd739ebfa02f33c0b1c4c2311c10b1efd6ddc70130b33f5ab2cdebd2b78d6f3501a983921e111ebac5cfe5599029b56eba376f8aa3b69f311743e410