Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 07:45
Behavioral task
behavioral1
Sample
a894f6731df07869166b9d585d4c1662_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a894f6731df07869166b9d585d4c1662_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a894f6731df07869166b9d585d4c1662_JaffaCakes118.pdf
-
Size
39KB
-
MD5
a894f6731df07869166b9d585d4c1662
-
SHA1
c2ce15912d909adf2efef8274cb292e424e9f30e
-
SHA256
86508f9459c77588102cab070d14ec55510f45445bf19e8defa60dedef9f4ac4
-
SHA512
7b9198d3fd206c4a99de83f6d2dc774158964018e0481ad091d1bff16a8890dd1ed05568be061921d2d1ebbe3fa8694c135a2c6e05a8fc9523e8d0af58af923b
-
SSDEEP
768:YgGzpDOpghY9RQriarvITDdqqxPRwNpx+km6LRaxGOu1MuDpigCsaYmmv:1GFipVPyvmAI3uFFysaYmmv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1992 AcroRd32.exe 1992 AcroRd32.exe 1992 AcroRd32.exe 1992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a894f6731df07869166b9d585d4c1662_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cf01586d651677fd7d267f44cd844537
SHA1ff41707d2cc482d15a0ed04dd0ef33c73f39de71
SHA2568ee22a173e933d694490f9d452f29ec3f7887c6feb232214ad79f56a4f656d15
SHA5126c1f8ff521a3ebaacbd766b16052448825fdec354196e3ab8d61b4a172c18ce65b2d9b1d9cb5be2d96499e25f09bc80ae96f02e0e40410b5b6fc3b1e447ce9a3