Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 00:36
Behavioral task
behavioral1
Sample
48c5ea46ff884bb4df737f6f09554e24_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48c5ea46ff884bb4df737f6f09554e24_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
48c5ea46ff884bb4df737f6f09554e24_JaffaCakes118.pdf
-
Size
40KB
-
MD5
48c5ea46ff884bb4df737f6f09554e24
-
SHA1
37ec6f67bb167636ff8d99ce23e3ef237d892cb0
-
SHA256
d2366454aafef4b28efa57faf3bd9a0f5858691256b02d369eadeca75005cbf1
-
SHA512
ce1992a7dd1e4ae880e2d99655f7cfce8e28cb294cc55f1620c773a146380cb5e238624c6d04d120943f832a83d857b20dbbe8d2c5880f71a136559724fa2a3e
-
SSDEEP
768:zqE3aD4ENQivZuqoTSyV1i11mPCVrGnmLupDQGatFm2OJsbNd1//MLTZVnTxbnD5:zqWa8ENQXqqnV1i11mPCVrGnmLupDQGz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48c5ea46ff884bb4df737f6f09554e24_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD566d92649618197a1dbab8b579bfb025c
SHA1bede2dfb38812e369506af88e51d509375409f59
SHA256b6605e70ebef3a91f2755402f4cb0fd65bac4eba23a8335c7058323c4f4637e4
SHA5129caded6c9dca979abbfe8079d23196601cbcd2fd4a044d07c0e70ef50851797d6d602ad78a93ff829e08f0bca5f9933aa7d4b4a61a9742a7ddd1203fe41a2512