Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 01:01
Behavioral task
behavioral1
Sample
a346672f579ad2ca4781d4fd85f36052_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a346672f579ad2ca4781d4fd85f36052_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a346672f579ad2ca4781d4fd85f36052_JaffaCakes118.pdf
-
Size
40KB
-
MD5
a346672f579ad2ca4781d4fd85f36052
-
SHA1
11fce03fd749a27352e9884c7f11d2cf9bbd8805
-
SHA256
4871f99290f552b2aa26d55921c5b80b74065ae4c286673f0acda548ef7122ed
-
SHA512
eb42979ddf68e0c2fe5defd9f6ca2c3e0d6b1317e29085a1c0f20c92dc0a6bf8b0e79b5fa92a04eafe1fb46690e773d99d47625acb63bcad805ec48cbe91f900
-
SSDEEP
768:jXuMZmwgCLWarXK5EXimvG3uMGRZ0LTyDrWUesj6UoKzip5wOd7:jXFZmGWS/i1eMGP0Lwjhe57d7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2756 AcroRd32.exe 2756 AcroRd32.exe 2756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a346672f579ad2ca4781d4fd85f36052_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5be56891e94ec11dbca274bbab4f914a7
SHA175efde435f4d846f5d4da0ff063922672255a6d0
SHA2568cb0bb8353f7872924d3702913fc6eff6a8b89f63ed3001b90796a300d563663
SHA512ef46c91cdbba5e3e91f341ff6dc03d966fdc164ee3863e42325b78f8528de68a3be69d5bd99b471b67c4a779f9bfdc840345006f658af70a8a3938d4a92f7000