Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 21:20
Behavioral task
behavioral1
Sample
a69e09624e1601afb4ad8289e8cff615_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a69e09624e1601afb4ad8289e8cff615_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a69e09624e1601afb4ad8289e8cff615_JaffaCakes118.pdf
-
Size
53KB
-
MD5
a69e09624e1601afb4ad8289e8cff615
-
SHA1
2441936e300476a0e6f7b0106ad4dcce7bcf5e1b
-
SHA256
bc30f26f7eec3fa7f70bb265299243ff1444863ada77617365d23cad98003c13
-
SHA512
cc6d20031e114e1db04f075b74b4799adffcb8b4b746bc94cd8e4dfb34fdffc18ee183acec429c30e44fcf843e02c0158812731de522275c91bbdd5bbea136fc
-
SSDEEP
768:mgGzpDyBVksi8sSd4pRFnPZfHF10R5qfAtbAnMtWoG08upc6JSH0W3A3ZUXWmOjS:zGFmOfSb3tWSNnSmuWmOjn8GTy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1340 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1340 AcroRd32.exe 1340 AcroRd32.exe 1340 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a69e09624e1601afb4ad8289e8cff615_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1340
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58243e4bbe2932296c16da7ca5e9004f9
SHA1d5ba44ff20f561ea3feb5225bf9f98d26264adfe
SHA2569dbedf704c65dfb10a0c7cdae25b85920cb09c0e8e83453b6dd4e8ebe858aea1
SHA5122444d0788a9d3625d630f852c256f15e0427920443e8537d3849d15d3bd50c569077a21524f96d7437f8d9e8665820b690e016f1c8a2e163ed57456d190089ac