Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 03:29
Behavioral task
behavioral1
Sample
74320f65ec29289d90b9c98d07825615_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
74320f65ec29289d90b9c98d07825615_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
74320f65ec29289d90b9c98d07825615_JaffaCakes118.pdf
-
Size
31KB
-
MD5
74320f65ec29289d90b9c98d07825615
-
SHA1
6a52514e580535ae58defeb8dd6b444aa6b09ede
-
SHA256
a6754382509b5fe2496145ef5caba9ed79b409b9e8859ae664cf032c54f9ba89
-
SHA512
41ad85a5de5a932854dc6bb3f1641d56babaee95b69af25cdf17a936375cd5a0e344b9dc692eb388b06285bcaa0b02defdf8c0c199d799146033cfcafa5060df
-
SSDEEP
768:/XuMZmwgCLWarhE5HpxvRbnUVo8nBlaBpaOIwWm+f3j:/XFZmGWSCjvRbnUVcBWwW/3j
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1912 AcroRd32.exe 1912 AcroRd32.exe 1912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74320f65ec29289d90b9c98d07825615_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58f8168c8839dd6fecffff0549db4ac4d
SHA120c57015ecd2bfc421598b9c81780f393aba8a72
SHA256c155f0921099afae3ba6c0b41e8f8a56558056a1241d961c14080c7e9d3632ce
SHA512707560f354d5c06bc94906b26fb1996f1530cdbf70f03db44bcff168eb17194f11444d532e71ed66fad0095086cef2cbfd44b570d4af1e27219ea37e3ba761d6