Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 04:16
Behavioral task
behavioral1
Sample
a7fb4182fbc9b2823eee45486a84a744_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a7fb4182fbc9b2823eee45486a84a744_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a7fb4182fbc9b2823eee45486a84a744_JaffaCakes118.pdf
-
Size
38KB
-
MD5
a7fb4182fbc9b2823eee45486a84a744
-
SHA1
e9ff094937dda5df1960f13472277aa5ab93dd10
-
SHA256
8d40f899627c8a8309b2971918233d664c3cdd88d8b38c62fd1fff6065fc5a23
-
SHA512
571fc17e6a0519f430d73bbd0c86dc3f3498f9461cfb54132d1a7e8a501eb3fb9224c5f1989c4dc20a2202c227cf73b41295cccdc6e521c8d61fda5289ba4ee1
-
SSDEEP
768:2HTVzcrK4Yz+2psl+v1LVATrBFswrRQxVniSg11PFqVdGBmxuJDQwakFR2pJlbTN:QBcrhYZCotLa9FswaVniP11PEVdGBmxX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2912 AcroRd32.exe 2912 AcroRd32.exe 2912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a7fb4182fbc9b2823eee45486a84a744_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD539732e96426a6909c079802c97b687c7
SHA1167252ffaa8f5331830fb07109b883cd459395f5
SHA2564e77949ccb0a7440ea4c03afe8e4bc7e0fabf52f03529ae65ea4ddf2417ebfe5
SHA5123543cf50a794b06934aa214a03479c4015c77d4f53bfcb12fa9b954aa7f54f38a3c1f44a5f1e513756ee5eea3d6b308c691e2dbd5d9200eaaa4a4060ede62664