Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15-06-2024 06:23
Behavioral task
behavioral1
Sample
ad26fc1d43a73af82de9370d923b89c2_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ad26fc1d43a73af82de9370d923b89c2_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
ad26fc1d43a73af82de9370d923b89c2_JaffaCakes118.pdf
-
Size
51KB
-
MD5
ad26fc1d43a73af82de9370d923b89c2
-
SHA1
2ff1eeb59b51ee7e239cbd48e0da2f73cf6f32ef
-
SHA256
4e71afe7b4adea210981b4608cdc3bce41edd4303d6a91f67dc233fae96d73bd
-
SHA512
e4eb9288beb0d825026ea33cd34c95b7a3080314e7468c25138da09db64afbf7d6646be41e517bdd946dbe1651a0584e5264ae8671d0f688a670c7057fec9fef
-
SSDEEP
1536:sGF7eUBymvNPDN+QjwN3Uj0pn3sgltGJD:JF7eIPDNtwNEoZswti
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad26fc1d43a73af82de9370d923b89c2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ceb36f0b785a069ef32fb73c5c4462a5
SHA1fe19d3b97d0a3cfd88b04eb95ccbcc1641786c85
SHA2561661b670f4c5e851c5489bbc470bf4a76f6771004a3316d5db35efd93baad4ab
SHA51244c3adb5395f3874feb9a2c220ae9c2d6e1f8b7cb437048d9cf8396266ceca18fe31ed1e4acda5ca0f23f91693474e62a5e12c0fdc3e1f440e44595935617067