Analysis
-
max time kernel
118s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-05-2024 01:14
Behavioral task
behavioral1
Sample
7b34216194c7c42a884bea79b31be753_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b34216194c7c42a884bea79b31be753_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
7b34216194c7c42a884bea79b31be753_JaffaCakes118.pdf
-
Size
62KB
-
MD5
7b34216194c7c42a884bea79b31be753
-
SHA1
87db4ec52df3d833985d8a53eb8e85dc3d22c7ac
-
SHA256
b62b66ef8114aa5dfab7b4b0327d6a15fe0cd00a5488ab11176e01bd68344b61
-
SHA512
0ea9be3103cdfe3a296032fa54bcc6a02d67790293598cd0b66f4981972930a18460ea7daa6f6067331b5846c6c895c2ced54558890e485d2cd0271ef1de00f7
-
SSDEEP
1536:iGF4pbm3la9gA8/pd+UqcJI7RGtS4XnANLJh63tHww15bRkgC+:bF4pq3lggAipd4bGsQO6Rwmc+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1308 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1308 AcroRd32.exe 1308 AcroRd32.exe 1308 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b34216194c7c42a884bea79b31be753_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1308
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a27d2912a7a483cc6274f1ead4dfe3aa
SHA15740a5a84f58c9d89ddf585a3a7464a3660d8142
SHA256e4706495d4160ed1eea18f8dbf7a94d67fbca212bf7c0fa633845ec8f7c2eac1
SHA512bfc7aab9e7142de598d73d9d81783cea62789997e7b187324c20b6855158be57162f1da8619f42b10fa2c0d132f430abd0c6f5677a6dae272773be52164d1626