Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 21:36
Behavioral task
behavioral1
Sample
a6ae69f6b6c355ed60e28944cf48cd38_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a6ae69f6b6c355ed60e28944cf48cd38_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a6ae69f6b6c355ed60e28944cf48cd38_JaffaCakes118.pdf
-
Size
46KB
-
MD5
a6ae69f6b6c355ed60e28944cf48cd38
-
SHA1
1b1e117ca7b3dd91218e801edc339ae8db951815
-
SHA256
fbe709f07bb07e2232ee7383989d7ad21c6dd03f40c25c71f774d0472a47e5a5
-
SHA512
8847bb477cd785ec3b28a9c93d06be7badf0ec44a0203ba5dbea70e48c0e5f6da0746f090fc7bc059f3eb2d1676f852c7f3a2efb5863c84c040fefb14cf3b5da
-
SSDEEP
768:agGzpDvpR231OUxfJDcHFl0oNPDAfNQODOTQKBmTJ6YrRg6q3HlMhsXQAE1:HGF7peDuFjSN+VHYdg6SWsXQAE1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2840 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2840 AcroRd32.exe 2840 AcroRd32.exe 2840 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6ae69f6b6c355ed60e28944cf48cd38_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2840
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5515657b3213c136d0550d3bb5afc8c90
SHA138dad9f58985a49c7e621d0aa251b79452f8cb48
SHA256c40d356ef6192590c58b8a29295c9e81b9be3a7ec381c969240d97eba21ef574
SHA512d06df3c82a580711ae68cd2fc2309c996e3668695f567d9f0cb82f422db93a87ac3e2fd64b78ec11677ebc0e2388c0b01e667ef4d16a25bcabce8c6c6305c34b