Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 02:34
Behavioral task
behavioral1
Sample
b15a311c7725f7da6037028ff1809f3d_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b15a311c7725f7da6037028ff1809f3d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
b15a311c7725f7da6037028ff1809f3d_JaffaCakes118.pdf
-
Size
54KB
-
MD5
b15a311c7725f7da6037028ff1809f3d
-
SHA1
b9768e2d6af046e1715befc31d33ab0b85433251
-
SHA256
56f26a759994e48613ffb83c2fb838585dfb7c51204e596753c994d47b7cfdbd
-
SHA512
09f5cd7bbd9e3d25875371fd27b3919c52884b7f75a4830941c629cfe90d7c39c9db280b0fbba2c0f466d5233c224175402dd1ea4125c8487befc1a6c0ee15fe
-
SSDEEP
768:ITgGzpDc3IIXz7R90aPBQIzF9UzxtU+Z/+5QPm2X/USn6ffh3dhgiciiiiM/q1Ex:hGF436q+9+572sS6fjnC1WsoIEmw5jOQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1876 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1876 AcroRd32.exe 1876 AcroRd32.exe 1876 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b15a311c7725f7da6037028ff1809f3d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ebc2ac179b8352b5bb1c5ad9883985f3
SHA10ae9f7f8d1eaa34e900d9acbaa0c57cf24585dc1
SHA256f0e0e9681835d2db5c6d13662500c89fd4821e8043d1dca917f0e59b0a766284
SHA51278daf945bb467c4535047923a6cb3f8d61eaf9ee8925619f68a4b42f563e7f8fa8cc743827a24e83e43669dc80b0b8f1a285de14eb50f8f9ef929185224d69fd