Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 07:31
Behavioral task
behavioral1
Sample
a46fde59b6471afd631202cde7c894f0_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a46fde59b6471afd631202cde7c894f0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a46fde59b6471afd631202cde7c894f0_JaffaCakes118.pdf
-
Size
108KB
-
MD5
a46fde59b6471afd631202cde7c894f0
-
SHA1
1e481da59783ad2abae030bd4040759a61afcf0c
-
SHA256
25a98a888bc1b3277e41a236908b4bf2abc94db8124355ebca373d3c761e491f
-
SHA512
c88b38759747d23543dee7a7708212d024189ffa65a378fcf265b4fb80724691c66aca3926de1d20d72bea4bd8fa4cc06d6c27a7fa37fd4e4c84562964d7fec0
-
SSDEEP
3072:skwqaRguQ8s8ymGmr1UuZryjrbvWo9EAYcSXuIwe71/KeysbL:3naRguQ8s8ymGY3KrzJoXuc71jL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1008 AcroRd32.exe 1008 AcroRd32.exe 1008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a46fde59b6471afd631202cde7c894f0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD571aadd8a90cce294fdaccb5ee6e79df6
SHA1c9490ab20ec50a5b90cfcbc0bee9eb5b56e29718
SHA256143fdaf9e6aac353c7cf668ba0c1a6d8fd5f064f8ca28f67b424a488e550bb0e
SHA512edfa61ac31b569fc957677a0b17540f6f0abd5c37eeb9c0495cb38993688d50640b5e4e2430b2117ddfb1cd66f7d6bfa5a3b0a134853251cc02da4b05615b94d