Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 13:21
Behavioral task
behavioral1
Sample
a9e1fd593e51c846d7fab3fe5da40209_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a9e1fd593e51c846d7fab3fe5da40209_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a9e1fd593e51c846d7fab3fe5da40209_JaffaCakes118.pdf
-
Size
39KB
-
MD5
a9e1fd593e51c846d7fab3fe5da40209
-
SHA1
6a2420a6a0421dcec20510e9dedb297c62ee43d2
-
SHA256
4be69136a01168ccae5efe4137871c88b5e47838d345fefc6f403e0a9ccb5886
-
SHA512
973864b8e27deb42a5e7f18b8c98f0e4645d05d4007b99670fdc348de0df24cc0cf77af9fa1f4005d75c35cdf89e0ff95f1eed1d1a2bd93ecd7d3f1d1097a03a
-
SSDEEP
768:pgGzpDPpFQzAM+sTo+GlM6qQCBkjcjNC/q8lqukqWKYS2+:KGFrpbOOjcjRrukqWdS2+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1248 AcroRd32.exe 1248 AcroRd32.exe 1248 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9e1fd593e51c846d7fab3fe5da40209_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1248
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD573d131c0b820cba12313410745185c4c
SHA1110779a37ff9cb0dbb275a5f0a799429ae69c2e3
SHA256b3bb68a36f1928b94bc5cc5f649ec559ef3df0a584c31935e1f63b0cda931943
SHA512ba9e92d9529c7364f884c2ca366b1e1aa905baa193b1a8e7e0b36260fb5c3099ca738d541bcbf980d8bd9f660c644cff9cdd5ce0a92ff37268daeff7dd062cf8