Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 09:13
Behavioral task
behavioral1
Sample
717ff5077385451e567bcbd7d6341c1c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
717ff5077385451e567bcbd7d6341c1c_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
717ff5077385451e567bcbd7d6341c1c_JaffaCakes118.pdf
-
Size
36KB
-
MD5
717ff5077385451e567bcbd7d6341c1c
-
SHA1
f35ec786c0753e7f0057f1c45e44cb7df51e1de1
-
SHA256
81fa99f9448928a4e2a56a63be950117ad3eaff2f3b2e43280904c069a1a435f
-
SHA512
f149f1362d2255832feb4a9f7afdd4b6355b3375c3c6c2360a7167b68e62ae9274ecaf7c9539a766360fb3a0d374d3113f77db1dd8c195b27a9e7b868f1e9994
-
SSDEEP
768:ngGzpD2pGCV1NAfrFEv1NPMUP1i/2RTVkFssIVs+uXjT6/2n1JW4:gGFip4T2RVisbVzunI21JW4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1612 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1612 AcroRd32.exe 1612 AcroRd32.exe 1612 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\717ff5077385451e567bcbd7d6341c1c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1612
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c1dcdade8b3639123112d12746078607
SHA1ae062ae67a4c8a2f229211daf735a1ba84e638ca
SHA25666f967bd3da36d5ac2c6d29be68054fb0b92af6fcb851c261f0a4c698c99ded1
SHA512ee6f380e4b11cb372256a8a68b4520837baaaa2f266646fb5f0c3cce0d89201654be4499ee1cbe88f99c4b286c47af39f4fb9d93d5daf40716648dcc508cc70a