Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 20:15
Behavioral task
behavioral1
Sample
7a630602a1b54bf2c3049719958767cb_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7a630602a1b54bf2c3049719958767cb_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7a630602a1b54bf2c3049719958767cb_JaffaCakes118.pdf
-
Size
27KB
-
MD5
7a630602a1b54bf2c3049719958767cb
-
SHA1
97d6897584efafe320f6f869a792d685a7e6f928
-
SHA256
63de1f7bb63e8b14d6ca31df0a60b9751fe28f49576800ee08fe84677012e094
-
SHA512
b1fc8de3dced1ead7cf95b4f07d6ee50fa16eb9fd564b269721ec0eb3c0f7156b057ed6b7d496641ec495f6c80f9ca60ad23f00c4cbe50c24758ccfc5c6cf242
-
SSDEEP
768:BuXuMZmwgCLWarKE5HpxId1TqjnFd5z6hlkhMYbmPCY:EXFZmGWSrjIHTqjnFsdYGCY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a630602a1b54bf2c3049719958767cb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57759db9ab868dde8b605d377cbce60e2
SHA12f08360d2d3ac894c7d099f6832ec68ad8fd38c9
SHA256822b354199936c69262501671bb9db6c476bd9f52a983d2aad552b5144b9fe1d
SHA512fe76ada7d21415289ae30020103100aa811c1a4a7ae6c046f057fd12fcb7f2819e9074b8dbd2472a0d15921adad8b86c0b6a16d8e76afad898348995f9460943