Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15-06-2024 13:58
Behavioral task
behavioral1
Sample
aec15b83a4f0a856212f62b18e3b89db_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aec15b83a4f0a856212f62b18e3b89db_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
aec15b83a4f0a856212f62b18e3b89db_JaffaCakes118.pdf
-
Size
91KB
-
MD5
aec15b83a4f0a856212f62b18e3b89db
-
SHA1
64236e24ae6af2932319b284f0aa39d6b5c891b0
-
SHA256
016790c235612a7db801ece715c3321ce618c6bbf268ce04a2d56ddd47fd6971
-
SHA512
54289884289a40ff63816f95958fd682a7f6851ac33fad7587604df9112905f05834894e19c7a8e3ce403709f27607483e4c95665452db77506a36bbc1059717
-
SSDEEP
1536:nXFZmGWSvvmcvk6dUqhOMA4p03PGBw5ot8d7NxegLLzkNz1MbTRUROTSqv2Fya1Q:XysvoqhZpVBmotweg3wV2a9AVFSY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2436 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aec15b83a4f0a856212f62b18e3b89db_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2436
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58d0189130333d65abd8ae621020601ba
SHA174ae5e960b6f0ed64e9401645c50645125b259bc
SHA2564b13a3750b361f00d33dfbd9d015995a8d57d21d4d63dedd98f30fa5deb305eb
SHA5123f2bd3a3d10f344302670d85f5437f219fbc6d3b6e658c2ac0c1bcf3023f32e424d8f46e4be28058c9cac2f2493909fa6e99e5cf13a98a87bde37f5f882c3474