Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 02:22
Behavioral task
behavioral1
Sample
ac94c7febc7203719be77af1df271d46_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ac94c7febc7203719be77af1df271d46_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
ac94c7febc7203719be77af1df271d46_JaffaCakes118.pdf
-
Size
186KB
-
MD5
ac94c7febc7203719be77af1df271d46
-
SHA1
5faa4b9132ad07c075a855671f06c0a2c51da627
-
SHA256
4013e7e6094a2aae8ebf6fd5020173941c731ac554d88d19a9fdc4d2dcf8685b
-
SHA512
349ba71561751bc550d622f1f727ec71e30cd3e1282959b2b24aa8ff620df8816b08ad7a24bd4e149cf150cf0ebc0e327202fce750af48a20834f662e503c268
-
SSDEEP
3072:t2irbxzGAFYDMxud7fKg3dXVmbOn5uG6KjnnQwirEmOps/Lp2SE:t2MKlWQ7Sg3d4bOHQw8u1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2140 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2140 AcroRd32.exe 2140 AcroRd32.exe 2140 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac94c7febc7203719be77af1df271d46_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2140
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56eb5359d048ce2d4ba2dbc3bab75349b
SHA1d6651df5aaa23e9ab92e8b24d3e38f9bebd289a5
SHA25640a0065ffc451904861451151279d1d54787c4de8ca1906fbc81e2eb428f0ae7
SHA512c775b6c95371a1f1c51ae0b691c42660b902ee3628219f9d4576d4c2f6f334083312aba4b375d641268fe725561c27ef67b94cfb53ddd053f00d6104a437a960