Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 18:48
Behavioral task
behavioral1
Sample
9f3293f9d5d7e7720d3f146d44a11cde_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9f3293f9d5d7e7720d3f146d44a11cde_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9f3293f9d5d7e7720d3f146d44a11cde_JaffaCakes118.pdf
-
Size
42KB
-
MD5
9f3293f9d5d7e7720d3f146d44a11cde
-
SHA1
a6ccc8e510733521f0872563f2081380f4453a2c
-
SHA256
0088d23e7728514fe616f7c0fc19b2a338216551ba2d4db29e7245b89e948cc4
-
SHA512
2dd62a090b302c63886d8d926c8e0703e999bc1e8dabd818f14e2b7006bcaf4df75e0945ef5d8fe9db4e2e4e1f0dc8ce592ef7c51cec37e054f3f1886b057d5c
-
SSDEEP
768:qgGzpDu1Klo50CUYMQDq+aCtH5sOupn5zdQXeaHfsDwF7y/SYHIAS5tBwUNk0:3GFqtqMH5Onaoi7yaYoA6LNNk0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2428 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2428 AcroRd32.exe 2428 AcroRd32.exe 2428 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f3293f9d5d7e7720d3f146d44a11cde_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2428
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5652f3d0cd5a1bfa68ecc5d74a59d35b2
SHA1084d1da692b770d0e94b4e7762f2482ac3dbedf4
SHA256bf2456ebe29b9834de9fc4bd6973937d9eeb40648e2d3ead9cf339bd5d8fcd52
SHA51244d75be8764793fb0005f436cc8ed5f67584f316de82be50f27e1610f4db937db37a1232202045a576fb37a73413a0d3829f44a4fc092f0a39c47e8641e63d34