Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 17:49
Behavioral task
behavioral1
Sample
b46a346b6259d1c1c4779b7283e15f9f_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b46a346b6259d1c1c4779b7283e15f9f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
b46a346b6259d1c1c4779b7283e15f9f_JaffaCakes118.pdf
-
Size
43KB
-
MD5
b46a346b6259d1c1c4779b7283e15f9f
-
SHA1
489d3dc66951c1bd398503cd31c19b33beb48e7e
-
SHA256
78d01c96e7c5711c122ca179e3b988407eb0e4da610357261939c5f943c397b0
-
SHA512
acbe3e1ce9c4bf4db785fa98844a5049ec18e0527eb9d887ad4efe8d7d9a7a03ebe7f93c593cca6db96a1eba41a03e82fd5518c391dafffd9c51ea8d65824dfc
-
SSDEEP
768:GXuMZmwgCLWarJE5Hpx6V4YIuKdDplDunX60Qy9BrQXImumbOx27OI4WPDoIHIK3:GXFZmGWSaj62YIuKdDXDunX60QyvkXs+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1964 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1964 AcroRd32.exe 1964 AcroRd32.exe 1964 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b46a346b6259d1c1c4779b7283e15f9f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1964
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51687f0dd80bfd98dbc7a15cbdb70797a
SHA15f42758332e2e46608c2b65b96019b421d8ef7e3
SHA256e864fb39dbc12905ff2ed791344229c10668b2b3cd3273cd68130a703c154d52
SHA512f03fbf9dbbe118b3a231f7d4c1cbe5b94c86611483a8947207145aa545ece5b8401cccdc28391bc16d980c8723339a5f9650a435791a38de1403d80691ede9b2