Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 00:56
Behavioral task
behavioral1
Sample
a34230876f7b2b6bb7f2063e6d5934e4_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a34230876f7b2b6bb7f2063e6d5934e4_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a34230876f7b2b6bb7f2063e6d5934e4_JaffaCakes118.pdf
-
Size
42KB
-
MD5
a34230876f7b2b6bb7f2063e6d5934e4
-
SHA1
cc3121788c2b2f793298958264006f019730588f
-
SHA256
7c69ad4740e59a4245107d7d628199fd68f00a31f734c630a204cb52b6f4ed12
-
SHA512
b326f55665d81c2bc97202029dcc8615ffd3315073aa472e77754a4025750ed7da1fa95ed4f1cd6fdf387c95f5e52ca83125a43569311ce4ea44f9fc5b119d0f
-
SSDEEP
768:KgGzpDwFIJyUkSX+DXAU/FfrIZN2yCG6AcGhSUhhYX9Hw8dpXmw0J7Rupc5:XGFUs8QiIbHY6Sx8J7Rui5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2784 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2784 AcroRd32.exe 2784 AcroRd32.exe 2784 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a34230876f7b2b6bb7f2063e6d5934e4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2784
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d66d79cb168691ee464195954c08f7d0
SHA1623b5c1be779dcc753190c322f493276a4c07b39
SHA256bfbff16a6e560c90f0f863a042b3c99bb3a1424565ed2c945d2eb867507da3d4
SHA512fbb1e25c9da69f867c6e2c39fdb2d76b280eabd074d43502a2b2344c9470f39e61f5a2c3f4472da4c32aa23f7102e80911295adad165574333d16daf9e0fdd80