Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-05-2024 01:44
Behavioral task
behavioral1
Sample
7079f8527c8064bfff3a67fb45fcd8ad_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7079f8527c8064bfff3a67fb45fcd8ad_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
7079f8527c8064bfff3a67fb45fcd8ad_JaffaCakes118.pdf
-
Size
162KB
-
MD5
7079f8527c8064bfff3a67fb45fcd8ad
-
SHA1
2840b21544de8d70091adb726aab953dd4662a72
-
SHA256
e8c465665dd753f46356ce679b492f4a15087ea0818670ddb5e637e2c9e3b3ac
-
SHA512
e0dcd38c74044b1b5dfb7891e39126cc4c0fa102cfb5de6969dd1f231167a3a9581b8ca50f3a8d9334c42a77e32c6914ee73495849dd0adcaffcd575f6cbe22e
-
SSDEEP
3072:QF3HL1kIsLGq6CzMrvmwD/hsuL6avzdGxVglTKcoyeTyBoiTSed2V:I3L1kpG7UsD5WavwxGBKRyeTypn8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7079f8527c8064bfff3a67fb45fcd8ad_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD579c8d68e98ecc9ad329f566a7e2103ae
SHA114e6f645fa9545a0e1fbc4eecabb0367df771495
SHA2564677055c4bb21b70e9ee02e2099eca583ba4adf9144274cf09854a6629d2d32b
SHA5122bc038ee1b5fccf0d7f52d8dafdd40c1057c12f47b727045726c1bd546efe280d459309a5694b82931bbbefc6d09cb9a458f980af71b015f5d488ed63a7b1785