Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 15:43
Behavioral task
behavioral1
Sample
924f7cfe0439dfac1f6fdf504676b12b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
924f7cfe0439dfac1f6fdf504676b12b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
924f7cfe0439dfac1f6fdf504676b12b_JaffaCakes118.pdf
-
Size
115KB
-
MD5
924f7cfe0439dfac1f6fdf504676b12b
-
SHA1
b290e90322c6762cefc45c43d8940ae1b37c5dea
-
SHA256
01039c8f08742ede4659b13bd7cdec85f60b51a9a4b7c4450e260357cdb8b240
-
SHA512
19274df3d2501b5bad549acc46f4681698e53908e216c7f6b45f2bff9b4bc5453529c45c5367ca4dd987d1c19103ff0b9edda06039b13fbea5d52e1977704eea
-
SSDEEP
3072:2y7Fmajsl9HYdeg/tNbY1E3BETx7sT1bppZOK4cQMUysP2:D7Fmajsl9HYdz/tJY1E3qW1b3AHb2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1660 AcroRd32.exe 1660 AcroRd32.exe 1660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\924f7cfe0439dfac1f6fdf504676b12b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD510c03a903a8dc3bfe4294fa31f9a840e
SHA1aa0f592853d63268899076dffedc2114f57799f6
SHA25661082ade29a2a8de5fab9bbfc78473b348c69fbcf83edce117e7fccbaa8c06ab
SHA512bc3dbe3e49a082c4d5544fd4a6b9fb1d6fcdb57bbead14a338b37da0cda43164c0f52001a7b02353115b809837346166df47ac8b6401617efc6b27f9373adb59