Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 15:56
Behavioral task
behavioral1
Sample
a65f05b02e058ffc04781da666b3fcb0_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a65f05b02e058ffc04781da666b3fcb0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a65f05b02e058ffc04781da666b3fcb0_JaffaCakes118.pdf
-
Size
40KB
-
MD5
a65f05b02e058ffc04781da666b3fcb0
-
SHA1
8fdf95c32b503c2a03dadec990f32a0fde408aff
-
SHA256
f5daa17bbbc2ec6479d2b1da26fbb4a71eba27ea774720fe459454e28bc51816
-
SHA512
99bc61c4861fe22031e2f30dad82cc7ebc5b38990e4a4d1b8573b8b320ce41f2721a69663cec879b7b2f001859eae559b3a37c898336df0854d5aac889ac0962
-
SSDEEP
768:EgGzpDYpi8zlOW2F8PcImpnncjdmZ7YEpLf0O1sDBvuzBur/iZgS:xGFUpINncjdIl0O1sZuzBk/iZgS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1752 AcroRd32.exe 1752 AcroRd32.exe 1752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a65f05b02e058ffc04781da666b3fcb0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59c6955edfd17273919c846e60d7f41ee
SHA1aab1749a2f1132a03c2406959953bfb05de7a439
SHA256227239cf3c7da79d2bb6b4a8f87552645be50b42e8ed67768e87ffd1fe080f6e
SHA51282dbddcb3fbf11dc3392bb397cacdaf136cb7a10edf0238d667ce4b94b6717b443fb7eb179a9ca0e1107f1f57c0a8259e516b21b4c61950358d5e49710114fad