Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 14:29
Behavioral task
behavioral1
Sample
a6069a7b5744310fea9fe9965f97aaaf_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a6069a7b5744310fea9fe9965f97aaaf_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a6069a7b5744310fea9fe9965f97aaaf_JaffaCakes118.pdf
-
Size
62KB
-
MD5
a6069a7b5744310fea9fe9965f97aaaf
-
SHA1
943d1fb0a8b1c8c13080060767586f4fde2a797c
-
SHA256
ada5bec206621f65dad1795a4f00ca80e0a444cfdcb263f5d5611a8fceb74c6e
-
SHA512
feae6e5a27d34876603cc189dc0f9761cf5e53cd4d7ba86900db0352705d2f904667158ad8991d653e2ee486838f17979291e7c38632dbbdeac2f80a272f7b19
-
SSDEEP
1536:fUhBRuXWPlHkUpv1Yn8tO0T55eOQJA1EOYH7PB2C92SXFZmGWSRV:fQEwaUDtbner2qOYHdX92IysRV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2980 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2980 AcroRd32.exe 2980 AcroRd32.exe 2980 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6069a7b5744310fea9fe9965f97aaaf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2980
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d057a833f9adc6ee2744bfcab518cb2f
SHA17db66e18120fa1463df35ccb234f92e02434ad06
SHA256d572ea25f4c0ed9088d1dd8029a10a3cf09f359a289c0c4161472e031d282ac7
SHA5126f57f87477c54c3774076e44075ee0d94ee3ce8ca1a5b82dab0575daf82f5f822a4ae7a7823dfd3f26a53745f88dc99ccef609e2d31592b7a3d7428508d09aa3