Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 01:56
Behavioral task
behavioral1
Sample
b13624baed02704f0d6877cdf75ca6b0_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b13624baed02704f0d6877cdf75ca6b0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
b13624baed02704f0d6877cdf75ca6b0_JaffaCakes118.pdf
-
Size
32KB
-
MD5
b13624baed02704f0d6877cdf75ca6b0
-
SHA1
f0c0183e3eaa2e0ecb63d323895566bde6881b7a
-
SHA256
0d6667604c26ecc2e7ed02a6793b32bd5bc4286065b60e783db3d49d40224ae3
-
SHA512
91b7ed601f0cf9ebaa42971ff1dc4671782937578ec092ba10b98e8b0f57030358e3bf51235bd0dc16e8c7e35e618755885ba35af116e75bda336cb0cb989dc7
-
SSDEEP
768:EXuMZmwgCLWarLE5Hpxl30YaIxJtXRUEmgz2ytsJQW8pvSCiEJi:EXFZmGWSEjl30YaIxJtXRUE4yts2W8p0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2248 AcroRd32.exe 2248 AcroRd32.exe 2248 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b13624baed02704f0d6877cdf75ca6b0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bc984c452dfa49bc19918b0212333f3c
SHA1878eb59a42954933cef364af5351ccd2c70f1b4b
SHA256660d859a5366467be669cbfd91308cd28a81d7148edd42674b69d0ac8dac6802
SHA51219a9f3ac7871f9cb195d04adb44f69fc933882f5a4435eb952f54a81625d218c6deef276922377644a1572a5b11d116de67dbe68c12c192e65558ec2101fd649