Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 22:39
Behavioral task
behavioral1
Sample
8231b537f959f0dfeb958ca51fb525b4_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8231b537f959f0dfeb958ca51fb525b4_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8231b537f959f0dfeb958ca51fb525b4_JaffaCakes118.pdf
-
Size
16KB
-
MD5
8231b537f959f0dfeb958ca51fb525b4
-
SHA1
900f2ae1a95c5cac2bac520fa3aace0ed03f9a38
-
SHA256
c29798a7e52c05b5183f98ee025f0bb71954731f578c7ce5926a0abaa6da84ee
-
SHA512
3be3f2025511daca1b1728782fa5fbff0c7c0406da82d2853310a6e8a9df64f9c6f63e5aa1b16c8289443c9c8193b20afea00872049b2633386fba77ff9ddd4f
-
SSDEEP
384:Vzg4xF5/4Tmz1WP0fhwSGE3Wl+99aYOq8MLiJOByr/66JgpHdfHWu+erqUW2g8hi:VzZxNz1oyYn8SNciokjJYdfHbc2TcWvS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1540 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1540 AcroRd32.exe 1540 AcroRd32.exe 1540 AcroRd32.exe 1540 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8231b537f959f0dfeb958ca51fb525b4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1540
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59598b465b3014d3b0c6094044a2056df
SHA1c505c4eb17a91f8c8b3394665f9a955ea4181f60
SHA25630d51f9e270d6e981413e58ca4ef9b02854cd014d3f02397d53a46b31cfcffa5
SHA512770502a1017877941e02ff2966dc9b80013f3ce934680579115e90ee0808733955956b2883f0f47e8a6abf9a8295ee32b4051fe8d47779ec9f74c446703c7b99