Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 10:48
Behavioral task
behavioral1
Sample
a945cd78b6ff57b181852fad4dedfa82_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a945cd78b6ff57b181852fad4dedfa82_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a945cd78b6ff57b181852fad4dedfa82_JaffaCakes118.pdf
-
Size
37KB
-
MD5
a945cd78b6ff57b181852fad4dedfa82
-
SHA1
1a275f91bc8c8ec2347e6e86a5757ef22ad995f4
-
SHA256
0191b787626efb2d4ee5067983995047669bc041def31f0a4f6969292329b64f
-
SHA512
239ca644e02035824f00eacfb81520c108bc4b39a3209ddc41183fa5e43476ccc1a6968c05ffdffdb3ee7491586c09ad3825a5c3fb2a3450b5f305ac929c282e
-
SSDEEP
768:UaulGtDTk/blYl1Ilho9cBRlXtPiHkyyC4RPtNYhOTJ1cHE5RXuMZmwgCLWarBw:U/0BTk/blYl1Ilho9cBRlXtPiHkyyC4S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1996 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1996 AcroRd32.exe 1996 AcroRd32.exe 1996 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a945cd78b6ff57b181852fad4dedfa82_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1996
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59d9c3e3f03713270107c1413e44a7e3e
SHA16f6ad60068c6f9107cfab5cc547c7a4c6aa66380
SHA256e7c6c9e0b8fe146d7bebc2aab1e707fc71fd7958d6324da603474db35e0b707c
SHA5122fd8df86b5be2b067850e33eb418a2d78fb3d84bd792788ab0bbf9d544d572857f178974d50982056340fbf0998ddca7c18b1d366847ed01e1f8a97cfae4d829