Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 19:31
Behavioral task
behavioral1
Sample
7e202e5bbff93f77431074396467a7fb_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7e202e5bbff93f77431074396467a7fb_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
7e202e5bbff93f77431074396467a7fb_JaffaCakes118.pdf
-
Size
33KB
-
MD5
7e202e5bbff93f77431074396467a7fb
-
SHA1
e9cf4212dd57d612999d59e50e302862ad1ee180
-
SHA256
4f2e5afb4a39ed9df5a9858e454dd296d72db875d09a7f783893f0ad847bc280
-
SHA512
10e65266ec479c65bbaa02bfceb97a58cad05b64f90e28b51a0c738d5d0b601cec4b5439e71e0f582c93e1b08120f637cb220ff3ad4e19a0e9d7cb6f2233f56d
-
SSDEEP
768:/vMtlusG2rrDWyTMwkeli1GSSWL70xE5tXuMZmwgCLWar7Q:/kluD2rrDWuMwkeli1Ks70SXFZmGWS7Q
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2236 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2236 AcroRd32.exe 2236 AcroRd32.exe 2236 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e202e5bbff93f77431074396467a7fb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2236
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58d3d7b70e22ed8c2285c151f621cf541
SHA15e19ec66cfe9d3892fc446518635f23a147263cb
SHA256d1fb6066379b2b62646e4291d652a724cfeb47fd4e0746200fe442af4f051a69
SHA512b2535e7214c0ecfbfe5c107616bf06c6913b3fba46ffa1d0d54f8b657379f23253e141ed25cfa63ab91de33ac8053b89d2398353a37bf40df4238230de4484d2