Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 12:40
Behavioral task
behavioral1
Sample
7581dafbb03b48f590899ff75568742b_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7581dafbb03b48f590899ff75568742b_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
7581dafbb03b48f590899ff75568742b_JaffaCakes118.pdf
-
Size
358KB
-
MD5
7581dafbb03b48f590899ff75568742b
-
SHA1
08e9439b39fd2f078deed368c5e3dbd78a738a86
-
SHA256
d2833e51b83f98d27e75d54cc153ca6f3b3db5a3891e155c7650eb66709235c1
-
SHA512
cd76ad0cd9f37195e2717abab41600fae96998539f63be9a60667c62e88723df231c1629076bdfb2798495026f22770856a7505bcd96697333865fbc6ea325fb
-
SSDEEP
6144:ek3cQFlnON3HkFMUI6gQgvoSVEg3DG+OCj5WcLM6Ti8FOxmcOCtrYQ4Q:5Myo9iMBQgvoSVEg3DG+OCjAc46Obx6S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7581dafbb03b48f590899ff75568742b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e48a195b856d9b86cf19f6a67a1eddfb
SHA13912e857560e984ed31d025b46132448a20c02a5
SHA256e602e983d12540fc9aebcf6d3faa77ed60044da1f7f8e5d68c357de16333bf35
SHA512ae2fedad9f4529a91cfd7d9d1c238cf83d32579c62e380705fe8a5079c7e51266a253ad706750ad41f7a6e15c6ed083b2399a7a5de0b262c679735d01d59b167