Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 23:27
Behavioral task
behavioral1
Sample
614b6130b60272b07bfbea2f5f9fd162_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
614b6130b60272b07bfbea2f5f9fd162_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
614b6130b60272b07bfbea2f5f9fd162_JaffaCakes118.pdf
-
Size
51KB
-
MD5
614b6130b60272b07bfbea2f5f9fd162
-
SHA1
20bf11cb1f7a370f9ad76282968237336c94e27f
-
SHA256
bea59ba76ab67f5bde36de80d8e787f41c6f465f51c708de50f477e1eedcc98c
-
SHA512
c7b6d9809aef4c95a42e73b00c26bf498f7b75822f9eaa7daca283a49ead21da287fc2edc35144bbf06956c225538e865ff9e2ce0ae840a13c0ab475a14657ba
-
SSDEEP
1536:QGFm2w0XenpR7WOr6LTmhab1/2WvPvx7vR2j3kw+L:dFmppAmwTmkb1/3vPvxDzD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\614b6130b60272b07bfbea2f5f9fd162_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ae20e1a4d2a074c1188f37adfe531380
SHA11dc4d1de6f4da3963b83b0fe550f3256154320b2
SHA2562815df417f9a58708dfdd28d72d2d48c36bb9a069618fba4fd43a921a48dfcc9
SHA51246fef08bbe1ff219c7d01a5026b91d686c6d09e26e6d0b0810ae3f75f4f6f49f7475752493c9c31ed8322439bc85901df503453609d2fe76d9f6013c203f6ec7