Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 08:17
Behavioral task
behavioral1
Sample
b288450d8a187210ec462096f9e53673_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b288450d8a187210ec462096f9e53673_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
b288450d8a187210ec462096f9e53673_JaffaCakes118.pdf
-
Size
16KB
-
MD5
b288450d8a187210ec462096f9e53673
-
SHA1
074061811479809985dea2c8b011432bc5dd60f4
-
SHA256
4437f11b5d5f410ba3f79e04891b84eec2d8074389fe637a71829199a485502a
-
SHA512
09f847d2974aafd9964c57013cf1e55ee359994413e892071d62faf5b75dff571d5ed5e76df3eb44c2e331344e747181060b4673088184ca4d0d41b3124067a6
-
SSDEEP
384:VzDL2Be8uurz1gTvQAEK02qwlUcppYAj3dzsUHfKcZ0C0wrQdeqd/SmQ2URRH:VzD6zxrz1yvQAEK02qwlUcDYAj3dIU/l
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2208 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2208 AcroRd32.exe 2208 AcroRd32.exe 2208 AcroRd32.exe 2208 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b288450d8a187210ec462096f9e53673_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2208
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55e7efb1c7628ef8073c6921ebea581f5
SHA13d1dcf49c8ee0a09c6162a34fe82a0fc39798577
SHA256e09d64be8b9641d56b5e92ab400b46c23ab698532a1136a856101f877e2fbfe4
SHA512e1c1aeed8aeff0f83f3cdb7e0c87291cb3e24d27ee7c0e84f7614f73ad8e8c01b8eb881db39e6b99086571725b5857423869fc8565731dd603806698d1051b48