Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 23:56
Behavioral task
behavioral1
Sample
a30851e29d5b1aa488d12d09b3cb376f_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a30851e29d5b1aa488d12d09b3cb376f_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a30851e29d5b1aa488d12d09b3cb376f_JaffaCakes118.pdf
-
Size
13KB
-
MD5
a30851e29d5b1aa488d12d09b3cb376f
-
SHA1
7c5d4a1613b77a1f8b1dfc6acc97e245c699e68d
-
SHA256
db87b90fc37b8309b65973cf39e233cbd397b7da881cd146d87b7dba664aeda2
-
SHA512
6badc024b3cc895350b2293cc838c8fb6ac4a2140608e3b13daa82e1574ba470a9be8a55e122b9427d9ca79c4e56b5a291291911ba584ef53e14653986d691ee
-
SSDEEP
384:Vz1jD14pWHahB1KQod3+waSosytlqqdWc1J5q6A0iIKrYbQ/V67Ra:Vz1jupWHar13uOwaSVytlDdR1Jc10i5X
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3012 AcroRd32.exe 3012 AcroRd32.exe 3012 AcroRd32.exe 3012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a30851e29d5b1aa488d12d09b3cb376f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dce8d41059b53fe0f374d680c1405c76
SHA16fd7e67ab71dcd40d7b47931c75fad0d8c7229d5
SHA25613e59a2a3b1d1ed413b0591792dfc69b0cdfc6de4723a37e50cc4751ef459766
SHA512a9630c1bf0272c20baef67de303cbadcce4a6273482621256839da79b43a32bbb40aedf0037645bdedd7711a905c9530a271fcad59d9cdfa8ab94f88c745df08