Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 01:22
Behavioral task
behavioral1
Sample
a358275ae81bb5852d2824590e97e458_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a358275ae81bb5852d2824590e97e458_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a358275ae81bb5852d2824590e97e458_JaffaCakes118.pdf
-
Size
49KB
-
MD5
a358275ae81bb5852d2824590e97e458
-
SHA1
189e4128e9b5a2fbc240e73aab706c1a318664ed
-
SHA256
946a31a09ccdea04e21120f4ffd344ae476f339fccced3c7c659768d19ce6090
-
SHA512
c9332d0114179f00220f311836a845d0472bee5ee1bf9b6888d2ac264e1df66a142b954ab8ee633c4f9aa1731421a2afcead25276dbf79fc59b0a0c4e80aed1b
-
SSDEEP
768:KXuMZmwgCLWarSSnwPEnKRdFsmh6bhSXxsxooZSJMW8A+2y6ec:KXFZmGWSSrPQIsmSSXqjZ0MWNPy6ec
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2024 AcroRd32.exe 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a358275ae81bb5852d2824590e97e458_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dcd1c78c465b6684354dc191d50aaf33
SHA12e8bdf1e714fbe7ad335458bb9c1ddb7055b3435
SHA256b7e338f0a04c7baaf0e96175336f3afb883b10f82d6f767b91ff0ad5dad412b9
SHA512d579ebe160a9be77be4fb0808dc226f8df51a03d398233802abf71bbc245c4ac071f28806d97bafedc4104f303321a86137888d29c1ceed6dc8d5f852fe5c766