Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12-06-2024 08:51
Behavioral task
behavioral1
Sample
a017b37fb7741273bb33c002ba6bc32b_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a017b37fb7741273bb33c002ba6bc32b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a017b37fb7741273bb33c002ba6bc32b_JaffaCakes118.pdf
-
Size
42KB
-
MD5
a017b37fb7741273bb33c002ba6bc32b
-
SHA1
c144cf567024d9dd19193213634a660c16355d93
-
SHA256
d9a6ee7e163c7e807ec29f20294c2c5440f9cc76f834450d5b534dd8ade88998
-
SHA512
932af8d302509917a3ff83ad941d0deaf2827c9a5bd4856c683380863a14a957e20e8eae9f349f0f325eb552f3efe52cee9a19644067904632215029ac1f560e
-
SSDEEP
768:BgGzpDF1BqES0hn/G+LWmnF0X0r30pozdQki+rMOp7p0ZIoBeBjYI3A+SbJ:yGFhBFuCkpKQki+rrp1MedA+SF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1696 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1696 AcroRd32.exe 1696 AcroRd32.exe 1696 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a017b37fb7741273bb33c002ba6bc32b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1696
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5945aa0d8a8a4a8ad4640dbea78e80b34
SHA1677c11745779cd09c050b4fcb4ee1cc0ded771a8
SHA25688a7ec9c5a01de1949ed7ef1201617ebbfaf9aae2436955802c91a734b2da8a1
SHA512d9be0f324446b344cb52dc0ac2b2c7ca48165ab901e55b5b359d7614486ae5851dd81b3140405eff3f5d5cef1975907ca7872ded5b79ac48962f98c7a2da6498