Analysis
-
max time kernel
119s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15-06-2024 18:50
Behavioral task
behavioral1
Sample
afdcd650757b42e9f987c4d6b46e9925_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
afdcd650757b42e9f987c4d6b46e9925_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
afdcd650757b42e9f987c4d6b46e9925_JaffaCakes118.pdf
-
Size
38KB
-
MD5
afdcd650757b42e9f987c4d6b46e9925
-
SHA1
d66574d6d4f9e8613dee33666f191e1e0dc73dbc
-
SHA256
c6290d5505e1586987393907e10c24fefd8e6b406b941b09b945c62cc91ed386
-
SHA512
d5375c96b42f9b2b603861d29fba3ab5c413b2b0c4adb93c0e4325870315657f1122ce6f749f3712d332a4acf5b5db45e5d53490314ac46c7b2d911c1435625d
-
SSDEEP
768:QgGzpD/p9z41lOCkx9TozAZLSjAk75y9PylXEwR027cjbijXrNTGDK:9GFjp9L6DNlX5R0icjbijlGDK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2368 AcroRd32.exe 2368 AcroRd32.exe 2368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\afdcd650757b42e9f987c4d6b46e9925_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD586a021a7c01783b7764363d0b487aa8e
SHA1fdc0fa6e61e54d1de40eb1f28caf9cbf05f736a4
SHA25669063122b6bec96e793ecb4fd120be5d1831031acb70f9d4393547062530b2d6
SHA5120cf915947adc040ce6cf083635030fc069ab48c372ecb52b0ddf7f4c4aaad7315eff68406e9f80aeac6667b984a81b1cd6acd40c25cd1e668c6d3b7ca861d621