Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 02:40
Behavioral task
behavioral1
Sample
a39056c09f54900afad4436288c6c2db_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a39056c09f54900afad4436288c6c2db_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
a39056c09f54900afad4436288c6c2db_JaffaCakes118.pdf
-
Size
31KB
-
MD5
a39056c09f54900afad4436288c6c2db
-
SHA1
2b92d01e9b6315f0ef612acbd2b8ea9e6c9ddab5
-
SHA256
d74a946fe8e5349d68f0a13ac3bdaeef6dd1966a8a7438d485f628f4f8501c35
-
SHA512
f96857596fa6ae7312b24900fe73d6eeef141518e07901e9030aabbe5aba10c72a457f90618871144198ed4c2ff09e056ad7a3e8e5e300f881b55b2121cf546e
-
SSDEEP
768:aX2QKEvooqEXdOP2UduhYm0xqlKsamKOoi6wPd:aX2QKEvVqYdO+wuhnbamKH4Pd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2368 AcroRd32.exe 2368 AcroRd32.exe 2368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a39056c09f54900afad4436288c6c2db_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58269ac88e29e2f1f1ebdd2f28c6a6f54
SHA1fd5b7171517be77b1c21fc67218fc62bf50f7d16
SHA2560cbbdce25e56bde7ccac6c1dc61370ac1ddb44ea2fbe6ccedfe2f0cc77b28411
SHA51288bfc7b79a9bb455f8831231dcedda451b3f8188e133284984aba1a884e648579117dd8a7cae4e9576fab92594798a2e34efb227d9d87a03c7e89a59e4b0767a