Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 03:55
Behavioral task
behavioral1
Sample
a3bf5587b11b6e608ae463cf53df8e1b_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a3bf5587b11b6e608ae463cf53df8e1b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a3bf5587b11b6e608ae463cf53df8e1b_JaffaCakes118.pdf
-
Size
352KB
-
MD5
a3bf5587b11b6e608ae463cf53df8e1b
-
SHA1
8c04815d7325d94c37e07df22bda0ce6d69def5c
-
SHA256
9eb7ed4ee0232f9f1b8fb9fcdc8df3e0388348b92338bbbb5a8135764e31f04c
-
SHA512
3fdd90e3d5244f084b4ed5b550e9c2fa0b2be88581983d72c4b0d784cb95018b13e71ae0ca27932793fcc8d7b0d3a0c2af5b2508596e555cc5949f552f949f66
-
SSDEEP
6144:ImWs1aY23O/wRfFwF/W8lXM2SOgP/OD7irNhz3jALL9z8PdOM11YIYWAZmgOJ7:Ic1aY5/wRmF/W6M28HOSz3s3x4dOM11b
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1896 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1896 AcroRd32.exe 1896 AcroRd32.exe 1896 AcroRd32.exe 1896 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a3bf5587b11b6e608ae463cf53df8e1b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1896
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5196e3027e2e1b18f554a3f593894df07
SHA1912e5cd7cc390ffbb8cc672f5f73538bd2bbbfb2
SHA256e68a206dcc55d618d1eb10f14b85d58440b30eaed5b5acf61a4bc4c8bdea411b
SHA5129d504f92da1be4efdcf21ce9466a6f785c606240f95d40a596d02689c9bfa0686e7932d5864b1e31c5fdc1a15f0780ab3f4eb38f3426dbb08cf2b04649e7e66b