Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 11:26
Behavioral task
behavioral1
Sample
39db05b10316a6ac64115a6564ed9d8f_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
39db05b10316a6ac64115a6564ed9d8f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
39db05b10316a6ac64115a6564ed9d8f_JaffaCakes118.pdf
-
Size
185KB
-
MD5
39db05b10316a6ac64115a6564ed9d8f
-
SHA1
7a90b0b6c08742f905bdf64644f85da5a3128832
-
SHA256
f05d2a10aa0761bd926afd01239c4dd2ed2025e36c086780886e7a28c4767125
-
SHA512
0e46ea8d96352576dea93f53f6305674d5c27f16f7550bde4ef75f1c5dc5209869f88828a1f5b4a47ff82a707b77f906ccca6f7cbbae2aaba50187f36b000e8e
-
SSDEEP
3072:X2irbxzGAFYDMxud7fKg3dXVmbOn5uK6KjnnQlFoO9XXAI2IYD5hKSfoXS9:X2MKlWQ7Sg3d4bO3Q4AAI2dlV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1044 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1044 AcroRd32.exe 1044 AcroRd32.exe 1044 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39db05b10316a6ac64115a6564ed9d8f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1044
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d9d225a9b066e733283d313588076fab
SHA11060c8c17477c801c25dd7814318a83b962d3f6d
SHA25656aad930e1840e285787f0d55efcf86c9929795182b8e55eb2e2e2f7505ad90c
SHA512d6170d8aa05d04eef75cd099efc276b49768f98157063971d55f5df59f04e14fef1a0c7d054f51b2b96fb074907ae1c094bafa2a52633102cfcc181a51bea7ab