Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 10:48
Behavioral task
behavioral1
Sample
39b739ff5dd2679f2481404a502c15ab_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
39b739ff5dd2679f2481404a502c15ab_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
39b739ff5dd2679f2481404a502c15ab_JaffaCakes118.pdf
-
Size
8KB
-
MD5
39b739ff5dd2679f2481404a502c15ab
-
SHA1
c48b4cd86490ff2a0095692eb863b0cbc5b592c7
-
SHA256
0ac7ddcf84e883d587976476cafd5482d661f3a032aa655f996a98ea670f19dc
-
SHA512
fb52b000820660a061cc531b6eb5f877dd72077d35b12ebaa53110ba56caf9bafc314413d013cd18014743e77800f2a1b9df5f238b20b65f377716f992c01753
-
SSDEEP
192:gCMV3+YOgR1VTxIrtEVBgwy38zDI083RvhUbRgjjp:D+NIrtUBgwy38/3iRvhUGp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2156 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2156 AcroRd32.exe 2156 AcroRd32.exe 2156 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39b739ff5dd2679f2481404a502c15ab_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2156
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58efcc6f12e5197d92de5ec9135fab310
SHA12e6a5486ff0c80415c1754a1d66cb01b51566398
SHA2562c09602ac6f3400a9ec85b3342a038f2575867470d699aa3da56da99d5cfe211
SHA5129e7911ea593cf084cff0c90285a1fff01cce2fc0885c7a1656840f557952d38275b99839c1dffc3dd17f8c7e8aae26dd851153804c9b8e298486ebc93a96392b