Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
31/05/2024, 22:49
Behavioral task
behavioral1
Sample
88a1245803a33fb7e55500a517b4bfe6_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
88a1245803a33fb7e55500a517b4bfe6_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
88a1245803a33fb7e55500a517b4bfe6_JaffaCakes118.pdf
-
Size
45KB
-
MD5
88a1245803a33fb7e55500a517b4bfe6
-
SHA1
1a96e9d99d289b3b976aa05281b7ac7438ab0e1e
-
SHA256
9cb8283043f4ab03ebded058dfa2b158bfe7d1ad81a09cd1f4ca296d9ee010fc
-
SHA512
f23ae0ee3fb2c72c46ee73aad983dae352e67d91a9aeeb77da2913053b2fd4e6625e1e7ff15045b3e67121c00bf3c93e2910ca591aa7cfa8a550c9bb16aace69
-
SSDEEP
768:I2XuMZmwgCLWargv1mP8LybqV/9SMENTckOvGLa7KSww/V8K+g1xKu:FXFZmGWSa1LV/sMENTr/uuq/uXgnKu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2136 AcroRd32.exe 2136 AcroRd32.exe 2136 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88a1245803a33fb7e55500a517b4bfe6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aaf7e664f88b094a6ad4e745a7c4b69f
SHA1da8859b87801bc1812c3eaa29c03b398a252165f
SHA25677386a08e9c426c7e2e6857c2de8dfdd1c41799a7a0bbbae880f573edaa2ce41
SHA512b8b6e017c1c10390b7c286caea8ff2a7d565390169e1cab9d674c8ef14df77d86873caa6cc89df09aa02c62e92529b3150374108d8e5e9c0caa3b93c5d337765