Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
24/05/2024, 16:53
Behavioral task
behavioral1
Sample
6f30805bc3a0cc3c43210e0852cdfee2_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6f30805bc3a0cc3c43210e0852cdfee2_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
6f30805bc3a0cc3c43210e0852cdfee2_JaffaCakes118.pdf
-
Size
66KB
-
MD5
6f30805bc3a0cc3c43210e0852cdfee2
-
SHA1
d771107c0a8918aaea0433617e360258ba56243f
-
SHA256
b29c4ccf6fd97a9b2d3f36586c2c8e54026d78b33c8582cbb2e3a3ba6ceb7480
-
SHA512
4f0a68a33bce8a4730caeeae1385868b4d1cd8f6290463e8f8d88434d0b03a2ab53df4a0b00326e3e93cbbaabb4d79b743514099ebc6d53cf0d7fb6643daaafd
-
SSDEEP
1536:IX2yOWk+ijAUCJl/YMKBJsvVBJ4nDaCdWanPdxTXOT:IX2yOWDaCnAMKBJsvx4D95PbT4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1756 AcroRd32.exe 1756 AcroRd32.exe 1756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6f30805bc3a0cc3c43210e0852cdfee2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD576114308ec5d9d05a20aec1303ddb3ac
SHA16a8b20453d948d4e132483f4a350fd9eb63d20f4
SHA25610b6f4e2b58264e404064017168fc04e0c228b2c0ffae5e6acedace9ef87cb32
SHA51272f0d8aab03df5098a24feaec0d6a24e0067540fee8435dc6f722f39af06097f19ab0880acc9be1ed51cf65dad4bc03d2d80726202532469c24eb2f2d1f29484