Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19-06-2024 17:28
Behavioral task
behavioral1
Sample
bd82eb8560c0353a44d27572520b198c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd82eb8560c0353a44d27572520b198c_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
bd82eb8560c0353a44d27572520b198c_JaffaCakes118.pdf
-
Size
36KB
-
MD5
bd82eb8560c0353a44d27572520b198c
-
SHA1
a80c9c7ab3f11eecb095542bad2e8854d603b079
-
SHA256
86dde37af7b2423fa0e109139d63bb24726e72fa43dff3506fdf719fd945103e
-
SHA512
6e51dc81c6c79cbf6e4bd2d4fc886191d5f61cdd301dcc348587e5bd851d158efd456319b6d960cb225a25769180ec08d915bbd62e4884659a38ea5fcf958431
-
SSDEEP
768:+XuMZmwgCLWarNNk4sCBKez2FRjIcp/WAi8/JMO7c+hxq9:+XFZmGWSTsCw42FtIc81Ee+hxq9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2188 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2188 AcroRd32.exe 2188 AcroRd32.exe 2188 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd82eb8560c0353a44d27572520b198c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2188
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a2e866d93e3f7551254f3f5bf27c8f83
SHA1202ab9e64eb248a6c180a76b3b8293af77fd8f13
SHA25626be98edd42622664d78387420598f1bdceccc94af34c0d270f50d6307f23e23
SHA5128458bbe9b6446269d432585fbc517f7425832d6340ab6ed6fe71c82974fa1c66f814e6399c285cce376144d1eebc94b888d15be0016cb335278acb98d57b74ff