Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
11/06/2024, 04:42
Behavioral task
behavioral1
Sample
9d022f6075343efd0e961db3ff655479_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9d022f6075343efd0e961db3ff655479_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9d022f6075343efd0e961db3ff655479_JaffaCakes118.pdf
-
Size
41KB
-
MD5
9d022f6075343efd0e961db3ff655479
-
SHA1
116a6d7ea642d27eaaded281ae02de740c02b53c
-
SHA256
01ed618d8ddefcaed62a0151a9ff64d828c1a182baf3451a99f18ce022620feb
-
SHA512
af4dc02ebb22f3457b77c4e9226a26def55f9a7c11149a18b5033347587a49e67677d01722d3d91d54bd90adf5abed2d5b48a9e3e1faad97f7db2235bb971f0a
-
SSDEEP
768:fgGzpD2pYnTPIepw/Ws2c33ipYbl+nu2ehJ+HcHNAy+CEyPGJPkMSUZSM:oGFKpSYb4nUPMcOyZNuJcLUZB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9d022f6075343efd0e961db3ff655479_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d2e861c4b03c96f7069c0752af8c74d0
SHA1f26910e1667d0faab47d9737c0fa112e906f3f45
SHA256e8c04042f2c38232b73c4a03860ddda044cdb61ae3720bc7e8b737f9ebe5519c
SHA51256b5169a057f1876cece8f8868d43c7876af10bba36e98132e76932ad26560742277bc104a02ae490c764c2dc5cedc72836c83ae6bdbceff58a5828f1d294cd5