Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
16-06-2024 14:24
Behavioral task
behavioral1
Sample
b3f87d8ccede7cf3293b425c497fd517_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b3f87d8ccede7cf3293b425c497fd517_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
b3f87d8ccede7cf3293b425c497fd517_JaffaCakes118.pdf
-
Size
46KB
-
MD5
b3f87d8ccede7cf3293b425c497fd517
-
SHA1
fbb001e28b2ff899d82fa56dbc7d9ea8ffa56f46
-
SHA256
c305dc9b0c2ce408e79e9b9d640a4b8efd2f6d33b9bf0e01777d9d0df8ef507c
-
SHA512
2929d310038f41fbb098aab9adceb57854c615be64f005221235e199be826e4711541708fb8bac8a88796a7c2ef77fdd7b703298dda545bcd6686053b354e20a
-
SSDEEP
768:6XuMZmwgCLWarxE5HpxJ//CubdlHqDwf9rFyebtAyysFivwkY4Ia5tlp3iIXTffZ:6XFZmGWSSjJ//CubdlHqDwf9Byeb6y/m
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1804 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1804 AcroRd32.exe 1804 AcroRd32.exe 1804 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b3f87d8ccede7cf3293b425c497fd517_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1804
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50b56479fd2649f3ae31069c4f4af1c40
SHA101a2b61fd36db6605caa058b7af0130f0bc95521
SHA256eed8decdb892d8491c77d5c92983bf3e81d58813672b36468f447845316d17c9
SHA5124b8382c9b49d1608ffad6c344aa763aa851068edb980e55ec90005987a1c6645c97f9c323a116559ba38866642f9e9d492a679d1c26ee75bbb522008a4e92f96