Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 03:48
Behavioral task
behavioral1
Sample
743d20ec2f50fddf3b3f4c145eac79ef_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
743d20ec2f50fddf3b3f4c145eac79ef_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
743d20ec2f50fddf3b3f4c145eac79ef_JaffaCakes118.pdf
-
Size
41KB
-
MD5
743d20ec2f50fddf3b3f4c145eac79ef
-
SHA1
259ffc3e9b05482721515f3f217f168a8f3b9fa3
-
SHA256
41958b9648195602546ab92bc9cbce7a1bc2b5eddf240027329ce3d2b5433eb8
-
SHA512
d843b1eb0f13078259a2802b13ed94f6c3cb41cd23581a4d7b48a4a5f2fbd90df65b1f8371ad604d56b55667a8f24dd411c07960ba51e3343af400efcbc50ab5
-
SSDEEP
768:HgGzpDl66r4YU9MXyjWa6a6x3FgQlB1VoO8+O9vU+7m7pue3FTL5uc:AGFx/VfX1e+O9c+7m7vL5uc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\743d20ec2f50fddf3b3f4c145eac79ef_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2884
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d8df23d4ddb0f59320349cdc3d9f68a7
SHA1c40bb8222c827a153a42ea41c4d0c3c84b6ab482
SHA256b6742ec162a4b8bbc2f71be9fb7049b0164ddc3c70438c58b16ea357dbf48d1b
SHA512e56545ad4919c817206ab6feefa21d15bd9413ff80e684915479a89c045f2f85b881582c739d767872909d5a3ed0e1b56dd8368905bedcf07dfc4bca4d0b702a