Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 22:21
Behavioral task
behavioral1
Sample
82240a62c717f48e8cd0b44008ec1cec_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
82240a62c717f48e8cd0b44008ec1cec_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
82240a62c717f48e8cd0b44008ec1cec_JaffaCakes118.pdf
-
Size
43KB
-
MD5
82240a62c717f48e8cd0b44008ec1cec
-
SHA1
1dbb76f82ebc6cd2e3e1eca59e593b7a13421c1c
-
SHA256
4bc81af47a6b4b279982ce9b7e71394e04e98ee904ad7502d8fc5bdaf6aa77e9
-
SHA512
bb8ae8415a2c09e8df4e5cc55a0a794cdcae16c8ee7f0ecceb1a2cb858a9c16e0c4cb009eb146bb38a7fde3afeced28ba95a55aed784c3d2649572809bdb293e
-
SSDEEP
768:ygGzpD+pJkGqduaixFn+B+zch6prZIfGY+7Iw5B9v+TtzTkNGMyF1Fd+h1y/0kw0:vGF6pEAaixzo6pdI87Iw5B9mh3kNGZ1x
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\82240a62c717f48e8cd0b44008ec1cec_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50de0acca3490a46683b8d6100efba42b
SHA1bb3bf73cab55b67b55c939c7115eab3b797f71f3
SHA25636fe00617f7e40fb218020e03dce83c3a34e3af171472b1b9acd0f3db291e463
SHA5120c971f8536c34d9dcee956a3f769689a1dd2d4ddccc76364c04a313ac64f8c1c80fa6cf95cd4e8c6f8dbb1d4189582b5c9bfc93799ffc92485171f97e31b6457