Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 23:51
Behavioral task
behavioral1
Sample
826710d8a077cb1973daccf7b317efe3_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
826710d8a077cb1973daccf7b317efe3_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
826710d8a077cb1973daccf7b317efe3_JaffaCakes118.pdf
-
Size
35KB
-
MD5
826710d8a077cb1973daccf7b317efe3
-
SHA1
634dafebab603b0031753f5830556bf664c2b679
-
SHA256
fe658f5b179b9720cf23960c45226b50ee40bf8daaeba4287e82df5bdf325481
-
SHA512
5f02bb7567170ab895d8cf766c9d44d24c684ae53e2e54144025629177fa7318ef7751d78ab1a25ad4610074299282c9d9b5e99e6a9691c6a0b9dc5e0c6cceee
-
SSDEEP
768:lgGzpDWC+ctywvrwUxEbAAhoCsrY+wr/3vDQ7+WfSDe/:2GFKzmCsr1wr/7QykSDe/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1640 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1640 AcroRd32.exe 1640 AcroRd32.exe 1640 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\826710d8a077cb1973daccf7b317efe3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1640
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5df7dd34da7453efe1ef838cfae2d64c7
SHA180adc61cc7e1fe2113482a5cad5da5dd3a6971d6
SHA256bf08c111b2de133df8170be0b13c1fa8d100d6439554746348ec7b13a98a74d1
SHA51238f8a37692914803c60259c630b408fdd1d39873481ae71e137c5e29dc8ebedc451e9e4b5c3c667aedfe43571ecf8b7c38c8830a07c50e7b36a95287df3c8b18