Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 21:39
Behavioral task
behavioral1
Sample
0abd4d129ec2566cdcc757eac4ee433d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0abd4d129ec2566cdcc757eac4ee433d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
0abd4d129ec2566cdcc757eac4ee433d_JaffaCakes118.pdf
-
Size
15KB
-
MD5
0abd4d129ec2566cdcc757eac4ee433d
-
SHA1
546a9c596fda9568371cf6f51bfc14e398991956
-
SHA256
a3a6f716771fb7d2213ffb839bf42d192e2a91bc2a74ea8ac610f193e239f0f5
-
SHA512
589af306462160e2764b14262cc3214dfa48583102d1ae3da8853fd9022a37c5389795c957f6fc8288ec2cff3e74bd2cf08bc177e72b27a6ea3f1f55089afc39
-
SSDEEP
384:5P5uqkV2wz1+Y0lCtkPA9mjwtdpft0cJrq/21jwyVSOYnY4:vYzCGft0cJrquJwyVV6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1924 AcroRd32.exe 1924 AcroRd32.exe 1924 AcroRd32.exe 1924 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0abd4d129ec2566cdcc757eac4ee433d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1924
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD540cf555878e7930e7e56040196919900
SHA1839edc07383786149f78099826b648405a6448f1
SHA25644024a679855116820e3e132cc20e3df0b92d40e527be4f0fd598e1d86ccda19
SHA51297b75e38c539acc3a7350951e05b71c2d74e49d2386ee401130a5c912db02df09aeca4fe57a5221d46ee3baf5e5eda22fbd51ac61d20ac8362b9b75abbf98026