Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23/05/2024, 23:49
Behavioral task
behavioral1
Sample
6cb0774b70094edf642e218fb5ca8d44_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6cb0774b70094edf642e218fb5ca8d44_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
6cb0774b70094edf642e218fb5ca8d44_JaffaCakes118.pdf
-
Size
39KB
-
MD5
6cb0774b70094edf642e218fb5ca8d44
-
SHA1
69694ba01049fee586d805a81efc040f436c26fe
-
SHA256
cae7473a9159adbdec6c1ea0996ead0e8f8eac8608b81aeff02e3739490b3b11
-
SHA512
67f298406055581b69cb119426d8d75d0352704d928a473be3d57d3ca41a2ea99d94ca2ef2a9f251c4cfbefab3bcdd8ed5238c48f2cf97d2f0c553c55d6040f6
-
SSDEEP
768:YXuMZmwgCLWarhWEtK8dVt3KWHKW7whcynTEI8Ypz+ch2hbG:YXFZmGWSXtXdBqW7EcyTEInpSZG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2696 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2696 AcroRd32.exe 2696 AcroRd32.exe 2696 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6cb0774b70094edf642e218fb5ca8d44_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2696
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a7fd81d97cbf32731c77ba10e984e4bb
SHA10273d8292ad8e14829db3a8f746fe46d70b9026f
SHA2567b32cd6ca27d6866029d83e742d4459d50c4884b6740e465614ec6d23956bf6c
SHA5128376f598193089385dbf461a59cd2ef365a57533bbb98a7f701a4b8b8b5e478f08b84a33734c035bb7a41c9721d1e59ad094b01cfacabd5e8e0af875c1284e33