Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 11:17
Behavioral task
behavioral1
Sample
840a0908d12ca47e6fca29e0b36aacdc_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
840a0908d12ca47e6fca29e0b36aacdc_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
840a0908d12ca47e6fca29e0b36aacdc_JaffaCakes118.pdf
-
Size
44KB
-
MD5
840a0908d12ca47e6fca29e0b36aacdc
-
SHA1
444176ed2801bd926546bef6c2ab448a313f6226
-
SHA256
d6b8206786fd746c8f44257cc9bd1fc7a7041e5a07ee33e6c283143b2d95a6e8
-
SHA512
c3745dcd3f942ccc6084ffd44f2853f757d8e9653c7f962df88b383c884f60aecd71abe69efa8d65a80d2b503c6c7646c660f92324ee95bcd4e646bf8bd29bb2
-
SSDEEP
768:MExz6qSUVnGim4unDQzakFm2WEex4iVsWO1+W1Y0BIFRrCualmXvE56XuMZmwgCc:M20UVnGim4unDQzakFmRE+4iVsWO1+Wx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1264 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1264 AcroRd32.exe 1264 AcroRd32.exe 1264 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\840a0908d12ca47e6fca29e0b36aacdc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c4e8d592997f4810b2ba1888177543c6
SHA1579da659e2f58927a611c4611062f2e0a87cfcdf
SHA2568b7874e45736580daae62b3684ea694489a934675c37b57678760f690cabf95a
SHA5129da8667bd64df11d8c3fdc986e4a3fdf5b76f8314993b0ac7a274deb0776142176fc5a54bf7d6ed055335685b516654f0aef2e9f8b0d31b857b5ffaf85d09cf7