Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 03:23
Behavioral task
behavioral1
Sample
44590c2455863beeffc332ab24d1771f_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
44590c2455863beeffc332ab24d1771f_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
44590c2455863beeffc332ab24d1771f_JaffaCakes118.pdf
-
Size
183KB
-
MD5
44590c2455863beeffc332ab24d1771f
-
SHA1
0a82722ccb0c9ba5c3794e22a39ada8424bb630e
-
SHA256
1ae6397d8e7f731fb0b506aeac9a8432b7216d6f615672f6de07052329eaf488
-
SHA512
7d2f196e79255ae2569fddd7a01073f74fbde175b02276773ecbd58bb00bba3a9b416270a1417c0bc765a494290a77e7c45cf34055a18ef64db76c31e61745a6
-
SSDEEP
3072:e2irbxzGAFYDMxud7fKg3dXVmbOn5uA6KjnBSF94s0p3jQlx+H01SQ:e2MKlWQ7Sg3d4bO9B1cQW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2104 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2104 AcroRd32.exe 2104 AcroRd32.exe 2104 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44590c2455863beeffc332ab24d1771f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2104
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ea6d284e22f64d8e75184e80cf2977f3
SHA19343ad305eedf496d71924f2e7781861abdbadc7
SHA256cd90fbf1a981c49e7030f84c32225e6e10f93c81a827b15d49bda0b13886d78c
SHA51241b8c52de80e72afd7e735f4f67430467d67e975f7f5b6e5dbce6602f775fc151af586cc8bb9b55e39dac7ed7fc32c10c4dfb5e58222ce3bae2dded3bb0babb2