Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
29-05-2024 04:56
Behavioral task
behavioral1
Sample
7f8ddfad1e353b671c88527a5e5aee56_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7f8ddfad1e353b671c88527a5e5aee56_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
7f8ddfad1e353b671c88527a5e5aee56_JaffaCakes118.pdf
-
Size
40KB
-
MD5
7f8ddfad1e353b671c88527a5e5aee56
-
SHA1
931e79852c18b0d94c9023f8ba7290797853baa0
-
SHA256
ce48d44dff76c7927fabbc4f245cb212c4e9bdc477ca8cad61dbc4b6d9264138
-
SHA512
6b27c2b7d4efeb1baaf57f8f868f7f1a35fe663a1be5225565d513ffe3178bb0fd865033b59e4467bad13312acfeb5972f4c844efc783471734ab78d11445baa
-
SSDEEP
768:7bL32XbGQ3zP7f2yxW25aUNCpc2mdz2d1kaVbV2ii1DEPJmVTGSmVuADQRaqF92i:7bj2yM7XEUNw+2d1ksbV2ii1gP8VTGSB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3056 AcroRd32.exe 3056 AcroRd32.exe 3056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f8ddfad1e353b671c88527a5e5aee56_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD599e2e9672deac894ab32768e4643aab1
SHA129b7a76ab2578797ec3324567ef24a27b5de419a
SHA25618607d15b856cfc96c30e02f8c8456bfc24aca40c7da681e25afe81ee5bf9bf4
SHA51285a313e056742a67a11b87bc6dab7feb08ddfc7138541eb707922edf093bf5a53af5c9edda6a8e17b87ab056a7a73c86987c6ae2193ac25695a262f8bdb1c6a1