Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 09:30
Behavioral task
behavioral1
Sample
39695f7360b87b37cb278fe27de242e1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39695f7360b87b37cb278fe27de242e1_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
39695f7360b87b37cb278fe27de242e1_JaffaCakes118.pdf
-
Size
16KB
-
MD5
39695f7360b87b37cb278fe27de242e1
-
SHA1
6790b8fc4ce3d5d539318893137cb1eaab89c487
-
SHA256
55a2f6648b7828a199dbf8d50462a1c8689285236829cdb4b78f2a5f87a0788e
-
SHA512
130950ec96512a977d37f97dd4a25176416120ae56f70aa6fda3202be492449b91087da028bbd6feb1cd20b00ffa4ff20eac1dae5e99dbde5126e808b77e260f
-
SSDEEP
384:VzJtK+5j4Yz1xZRUT1AMkV7KGYGbnTQFBr6puZPhaC/dGZed2xMih1comiCihX+I:VzJtK+99z1TGx/aIGLUFR6pulgAdGk0X
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2872 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2872 AcroRd32.exe 2872 AcroRd32.exe 2872 AcroRd32.exe 2872 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39695f7360b87b37cb278fe27de242e1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2872
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD521171d00cc9fb2eaedde767bdb5ff31b
SHA14bdf6e45696d531b739dd8ad27cee052e2699086
SHA2567cb847b5d142768baf6fb338c58f57621ea6cf59e48d2f2396b77a30629a80be
SHA5123468b1e44133e538283654d06b670de8e4952674e969645a83717bea728b2ad9f4daa0cc5df30e8036c105e61089086560c5938c844e1644b64a452e80b2be57