Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 17:42
Behavioral task
behavioral1
Sample
9f05637c275a9c24552560f786af9752_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9f05637c275a9c24552560f786af9752_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
9f05637c275a9c24552560f786af9752_JaffaCakes118.pdf
-
Size
18KB
-
MD5
9f05637c275a9c24552560f786af9752
-
SHA1
c5ae75f4999b4a3ef479a96f2adea54d02bbb3d9
-
SHA256
37cd87215fa2d0c11f46ab5c0b8cf18e4b084a67b252e17974adb709ab25b9be
-
SHA512
f4df4caae7f1142dc7b2d5d6e01f31c384e6645c2d59f5630be0bca3c5d78ef6e1e2a69c553730af7b10fe78cb98368184dc83f7c486005c34ad8ba51c3d6753
-
SSDEEP
384:VzXjKOUQF3c7Q+fz18MjNF/ECUyNt91LkqG6H0UGWQdA+KnHwuYOuDOsJyXxiIy5:VzzKOUQFs7Q4z18MjNF/ECUyNrBk36BE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f05637c275a9c24552560f786af9752_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5968bb32489daf62bfa8ac3cac7b3a8b4
SHA15820f29f0d162590dc93e491b0ea81e5804eab58
SHA256f8e5db50271b8d64de70e0ca190a2b4051e9b9fd3b1a52260cfa0cbf22a2caf0
SHA51299990a0e6563f00cde9aff0426004aab3b841bece76697dfd134057d5905342abd402de1d94bbdda58ebd4f814c17da7b7eefe7bb35b90089f8d414bc7db69ca