Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 23:51
Behavioral task
behavioral1
Sample
3d17c9bd51819b236c8567ebbacd68cc_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3d17c9bd51819b236c8567ebbacd68cc_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
3d17c9bd51819b236c8567ebbacd68cc_JaffaCakes118.pdf
-
Size
47KB
-
MD5
3d17c9bd51819b236c8567ebbacd68cc
-
SHA1
3d740305b78727b48a204e80bb212f4dadaf6ea9
-
SHA256
f5dcdf98ccdb108ca163438fce4b441e1d979a5b5f249df6694ac74ba2f46079
-
SHA512
664ce662af543a9599471563d56e0b74e2333472b1269af864373dc33aa9fb42f600685a4ff1919acdc075c100b08188021a97456c911ee9618d7a82764e8797
-
SSDEEP
768:jgGzpDde80RkQZ4OSsa3R5+r8W1/PmvWoCdVvImqSwxs6ZAiVXDaiqqhG25DCgHN:cGFRe8Gd6mHwz1aiqwG25mFfh+bQA+R4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1700 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1700 AcroRd32.exe 1700 AcroRd32.exe 1700 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d17c9bd51819b236c8567ebbacd68cc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f95486ee030c81042bbff584862ab3b2
SHA15445050a6c7fcd6dbe13a4dc0d769552c2f87146
SHA25677c17f886b715453adb8e6600063d94d309693aef109078b57face7693d88383
SHA512308a3a4f731b1a2557af65e7bb11728beafbf2499e47ec9f37c88f955e84f487d7e22f27f043550d79e79647c9fe1988c3a1bcf07b9701e686e33f0072fa5a08