Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
24/06/2024, 09:53
Behavioral task
behavioral1
Sample
07cfb6a705cbc0798fe15c6582b0959c_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07cfb6a705cbc0798fe15c6582b0959c_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
07cfb6a705cbc0798fe15c6582b0959c_JaffaCakes118.pdf
-
Size
86KB
-
MD5
07cfb6a705cbc0798fe15c6582b0959c
-
SHA1
59244719147f657a43dc188c0b5ec1dd473a19b4
-
SHA256
6a7983280e8d61b0ab412e08c1c15d44cf3c784386e82a67a3a509a1959b1e13
-
SHA512
5b3c133dc4ee57cede8f29115cc36798c1a169dc51bff46d6519f5036c2de89a3c371dbaf94528da05982a14e936005c5f389d8665eebb70ff09db996841f3d7
-
SSDEEP
1536:k+G5XhwoQcRG01oIhRG1NrJ21GLIkWcvVUIlpCzdjQqh2GWjCtLAWWIvwwVLZv:eFG011i1NrJmQI8x0jh2bjuAuvwwVF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2140 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2140 AcroRd32.exe 2140 AcroRd32.exe 2140 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07cfb6a705cbc0798fe15c6582b0959c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2140
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5651093b46d3bc54dbd963cbf11b511dc
SHA158054d96419557f843606c7350b0b598c42a1ef0
SHA256de8a861d9e53189c41a8a6248253558ab89572f8ea2db04addbafdeeefed08ac
SHA512c863d55565e7b917b6311c83febb9f95dfba49fbb1b6c11690df1e3db0b61856b8a7e3d5520c49b4bd988839655cd665524cba67baca5cea3e6b67f8d3557387