Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 14:47
Behavioral task
behavioral1
Sample
986e4c1991e69586e124adc3f30c3d1f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
986e4c1991e69586e124adc3f30c3d1f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
986e4c1991e69586e124adc3f30c3d1f_JaffaCakes118.pdf
-
Size
38KB
-
MD5
986e4c1991e69586e124adc3f30c3d1f
-
SHA1
5846f0a613f72238099be3c76d0272bd98d61be2
-
SHA256
25eb4269d79dfdfffd4b961eebd1b1c728dfcc9776e1f9f34f0a867756ad0cf5
-
SHA512
6f59d04d06004fb72c00ee38fb9f5718a6a653c33b2a21690ff5d281cc72927bba0b9436d857204441b46fc059eac70c323b6f239fda8a6c5e25197dbf9c1140
-
SSDEEP
768:mxXuMZmwgCLWarPbAmmi/gu/vwrs5UVLJK205lVRjs:mxXFZmGWSdmijgrsiVtKFlVRjs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1524 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1524 AcroRd32.exe 1524 AcroRd32.exe 1524 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\986e4c1991e69586e124adc3f30c3d1f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1524
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD555dc5b48e6a45fab48aa56dc72313564
SHA1eb29c8285eebd37a683508bfd9a1f2e1b145fca3
SHA25681b1fbfa93334248d66dcbc01b1b466c4ebe61ec86c85aeef6617fe55fbbfb98
SHA512c8a2e2fe5f03d14dafd1a413c98e1671f90a2fdd2e79232816930ebf2ec5a3f449a11cbd0d6b875b99b10faa83d2b52d60979faf6a6e61fdb08defe79a528867