Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 22:35
Behavioral task
behavioral1
Sample
7ea4f7781e7e25677d6c29b2d86e116b_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7ea4f7781e7e25677d6c29b2d86e116b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7ea4f7781e7e25677d6c29b2d86e116b_JaffaCakes118.pdf
-
Size
41KB
-
MD5
7ea4f7781e7e25677d6c29b2d86e116b
-
SHA1
1be8b268104019d09e64a8b9d9580765f79b764c
-
SHA256
6bec229bf501fb7ffb69ba83fc4e1d4c957a471d96ee2f6e22e58ac114a399c2
-
SHA512
766854ac2f127fafd4919f1b0b98709ccc4344ab80006a61a3ee461480e46ef3fb74f6bafd9a4661d5b170c1f751442993f45cf0389764b4c0c043e0d6b191ae
-
SSDEEP
768:9DgGzpDZpu8/q4SQH3d7aZDKI/4v27TVG6YlEWyCzbyEkW61lqRCuNi/:WGFdpu3uoTo6YeWpzbyEkDlqRCyi/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ea4f7781e7e25677d6c29b2d86e116b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d2bc2929286e0519a78f3409ed2a744f
SHA16503f6d4715ddd20f9711f0b3c08ff71a561664f
SHA256a82f2d3903187c9332e1ed93015491c8ac9bd361ab47265d128751f2617ff655
SHA512b76ccec7c3dc385a0ce2bc37a371058c35afc32611bdeac0656b44a4a8f7dc74a0da1939ecbc3be928075845f440ecb70d34fc4615efbb67b94628915f2329a6