Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
24/06/2024, 08:41
Behavioral task
behavioral1
Sample
078114dff9945d60dac755884fee74f5_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
078114dff9945d60dac755884fee74f5_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
078114dff9945d60dac755884fee74f5_JaffaCakes118.pdf
-
Size
34KB
-
MD5
078114dff9945d60dac755884fee74f5
-
SHA1
02ed28236ce4b2f5ed46dd33c1800a53b3044f1c
-
SHA256
7714dcdcadb2eb14a38c470d09f3a25995f383da78150a80515de6acc7b5ef17
-
SHA512
e84170c7e67f4a09c86d0e7f3bf474231b83009de8c226236cfe6eb7693f60ec854130ca5d885b78d53c8b9177a8c6653a23706e78412268c327e1c77b7b4d66
-
SSDEEP
768:IaG8xsVtbg2dueoLDJu5fhrgFLJB0x8sp1pXa:DG84trueofKhriWTtXa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2148 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2148 AcroRd32.exe 2148 AcroRd32.exe 2148 AcroRd32.exe 2148 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\078114dff9945d60dac755884fee74f5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2148
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD549cbd87451de66f4e556781203ad171d
SHA1ec3603e97e91cac354e48927cc7cf4aa6ec01df1
SHA256fbf9a24297a1b4d944d0f611d4921eaa9aa2c6a327714191e09427c11969b463
SHA512be4e44900a719d092f3280befc1fb8a79724740c6822111b482bb31fe466db3a5e2250d8723a707b192d277faf174c59b98b97ab8e1d4e97e54b2a9f2a73e008