Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 08:32
Behavioral task
behavioral1
Sample
a8c0d6eab27e9e6d4743a83a77eaa098_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a8c0d6eab27e9e6d4743a83a77eaa098_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
a8c0d6eab27e9e6d4743a83a77eaa098_JaffaCakes118.pdf
-
Size
42KB
-
MD5
a8c0d6eab27e9e6d4743a83a77eaa098
-
SHA1
0aa828856fad0985daa7a1c0b65b8afbc726cc82
-
SHA256
79fe5785a8d6c7828781ba68d29ca1ab5194c727e6598d092cb57fb264d64ba8
-
SHA512
881c7fe03947ac3375ac31c8da24e55a72f6cf3201a98b07c759ed51ceabbd478d6c5c9363e2744d53fe2b9abc9faec50f262c408be74050d7bfac977c96a6ae
-
SSDEEP
768:FcXFymYtFMR+X6WU6XV7qLkVHzV6H6xU+u9F0fldudH+4nzNCPLVvUTMSsQ0Rfth:aXkwR+X5Xe+cQr
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1912 AcroRd32.exe 1912 AcroRd32.exe 1912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a8c0d6eab27e9e6d4743a83a77eaa098_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5301e8b4b3aff9c186ca8bfb5cc691c4a
SHA171261f57dab3c34921f1d561af9e5285cc852524
SHA2564994680f5f510ccd726e2af2aac6944f560f1e2857d5abcb5d4b185220fa375d
SHA512387f1ae0c98eba70e387a70a1aac686f61268a0a2cf8c8310308c26b05003d27c11444c24f0cc5d64e8b4bfb75c8db2b86d150da4bc5e7cf22c32363421fd4f9