Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 09:44
Behavioral task
behavioral1
Sample
07c7193b1c0bc91aa31594f8295286bc_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07c7193b1c0bc91aa31594f8295286bc_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
07c7193b1c0bc91aa31594f8295286bc_JaffaCakes118.pdf
-
Size
12KB
-
MD5
07c7193b1c0bc91aa31594f8295286bc
-
SHA1
3071da48366c71f524570ff0ba0ce2df8d188c19
-
SHA256
9e771c6fe0ad37165404a44a0bcb043ea2bbcb91cb837a393781797c913ab1a8
-
SHA512
390ae57bd1214812830467a69e7888cde96ee099c3b899110d431566cb1cbe7f44407a3e6d36ee2d6ce576e60a42b5b987593cfe104d871e469cdeaa12092952
-
SSDEEP
384:EPz4ULMxLIKXHwSb6xuwfE7NAD7xqhSxd/rtlT3lzhkQ5:Eb/uZXpD0ExAD7CUrtlT3P
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07c7193b1c0bc91aa31594f8295286bc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5375209c7d9be866c2ffb529cf3d5ca5e
SHA10f136301b256750124ddf59f086c2735541dfd30
SHA25687e6a1afc744e33a60b9d050da10db83732850be2c4a27ebd944dea5fe5b23f2
SHA512a3f564c6a72c014f28294ff81d5900c71ce3826bf6b9c4ccf29df9e2dbb73e2e774e7ac70db71a2f71590a95682801f0af8a3330f407368bb66ddeab63ebc63d