Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
12-06-2024 15:38
Behavioral task
behavioral1
Sample
a12e4d029da79597102749b6fe6f6aa7_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a12e4d029da79597102749b6fe6f6aa7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
a12e4d029da79597102749b6fe6f6aa7_JaffaCakes118.pdf
-
Size
33KB
-
MD5
a12e4d029da79597102749b6fe6f6aa7
-
SHA1
0e4393f6bcdd0d727d754bfe85f5d992789a5f0a
-
SHA256
c649267a327b763f89b4b4a929eb8189718e886332d725e1c062f9db144a691e
-
SHA512
6fb41f3c7c177459a3458decc979dbab75113d29edbf3fe6a4c8571ddeb1ddbba3c91baaf070e299af14bc03861a29e72f1502c01d159b1060e265375928009b
-
SSDEEP
768:YHx7Heubc0KDapEVt/u+qNdBFpOayQ1eh72E1FaVXVtiR1HPeVOGceE5NXuMZmwu:iOVdu+qZ7OayQ1eh72E1FsXVtiR1HPel
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a12e4d029da79597102749b6fe6f6aa7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD562befdfda0c3390926a9d9b6eeba33cd
SHA1ece4d4e086408b498fc16312ad76eb4af3946423
SHA2563f89eec38559295457842c222020006916a2c059c0255c60ae3ace04ae67f83a
SHA512b9f68e91dce167cf1a43eb985a2ef8b85ad4a2cde5f67ee592f23c39b9c1f42b32b1179711ad7fb9860540503aca10fa924bd842815223eaa30d536afc04596f