Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 07:34
Behavioral task
behavioral1
Sample
a88b22b86aadb322474560d7d3d69389_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a88b22b86aadb322474560d7d3d69389_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a88b22b86aadb322474560d7d3d69389_JaffaCakes118.pdf
-
Size
53KB
-
MD5
a88b22b86aadb322474560d7d3d69389
-
SHA1
ac7e6d7464073e962c2240b9b79ce196f12727c6
-
SHA256
1c22c3ea4683d036e928c97693780a4190825ba380ed58de0d26440cf6249b84
-
SHA512
306c9b05b52c8f39cb243032b2dccecdecbbd03d9630e5e5349991904221dc67edd2bf15347e97ddb68b59b3a7ee5f9128845dc2f700fa2d8bcd1b06dfba0638
-
SSDEEP
1536:CGFmgE2tt3dUF6Ghjeu2F470aFVE2uUsDfA7:7FmgE2bRse7TaFVE2uUsDU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2648 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2648 AcroRd32.exe 2648 AcroRd32.exe 2648 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a88b22b86aadb322474560d7d3d69389_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2648
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5163c42e2bd646bb954d483e40c540f37
SHA1abd85d95110c48a2b0121c95ae5f14ee8f010704
SHA25600cbefa51436b1306839bf403cfcac8e88e5e9442ae8a3d4f29707d58ebcf8e0
SHA51200cd65826938c9991c624fb3fd6c31577012d6edf1288f937c521f1a7ab9d57409eb034eaf0e6d5eb90bf2f71591eef3b5791704dff11d17462db464cc168edd