Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 14:56
Behavioral task
behavioral1
Sample
3ab17a0f87ade766400944d75fdc50a6_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3ab17a0f87ade766400944d75fdc50a6_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
3ab17a0f87ade766400944d75fdc50a6_JaffaCakes118.pdf
-
Size
41KB
-
MD5
3ab17a0f87ade766400944d75fdc50a6
-
SHA1
b0fd3c7d39ca16f6ea039980cbf9050e7795bfcf
-
SHA256
7aa37f42e232a01636e07f7b43016d22b417817fbe723127c600108d1fd8589b
-
SHA512
4c850abb5c3edc678018cf2a64a37fb1575e9fba6d829f9d750b00cb6406f5a87ad1767aad7b436803eb39baf9ea99daa619bedfa27a4c655c20e45f18893122
-
SSDEEP
768:agGzpDU+k4FgLuaKwjVEL91Qd7H9GwCpDTr2qXTIccGk1nXe3Pm3j:HGFQ+Y7HoZDTr2qXDcGwXWm3j
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ab17a0f87ade766400944d75fdc50a6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d28226aba13b09ae537c3e1f655e4b3f
SHA18f085f560dc256734ce7ede47efe7a879843f35e
SHA25619431983445cd50ad6f1f8a0ba4ece466bf6219852fcb70980f1151347d45895
SHA512e42019864ab075c974f6d7ac14a7e822a1d2227ddb17ff0fbb542f2a94cbcc8bb95953e6e9e7945b1a911cca4d2defc2a4dfef4afa0382cd75e8dd03f5f0a156