Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/06/2024, 15:43
Behavioral task
behavioral1
Sample
0963d2c14a4961fb006f2b3b4ffb4127_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0963d2c14a4961fb006f2b3b4ffb4127_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
0963d2c14a4961fb006f2b3b4ffb4127_JaffaCakes118.pdf
-
Size
8KB
-
MD5
0963d2c14a4961fb006f2b3b4ffb4127
-
SHA1
d02bb4a1157fc7758319997f1c4992b26f1c1805
-
SHA256
065cc35286cdd978f68d781aa9f32c5ea7dc271164800cab32d5daefd45af1df
-
SHA512
6930753477c75937e26cbb8f39d2129bb20376487ff650f0195e5e2b102948c49b3ade207ce7086f9281c4c61ea0ecfc79a8d336b4e8aa7cc2efaa03389a3814
-
SSDEEP
192:fwP5uFm4k9twPfn6IBj/A+PcGRkLNnnE2kqzXEKPd4456StBvzOseYz:oP5uFm4k9WzB/AiRt2/Xr4QTtBvVeYz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2132 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2132 AcroRd32.exe 2132 AcroRd32.exe 2132 AcroRd32.exe 2132 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0963d2c14a4961fb006f2b3b4ffb4127_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5be424c0b1a3ab54f22e95f87b2274478
SHA19d9483ad37de65f9573057289e17c63992781abe
SHA25644bc163882972ad5bc2ff743c382709ca5d92e12747f36de5505122c26b520e7
SHA51241862fbe201cd93cfea0286ff98b2cf972234e6229cdb1da6964003697a740439f2fec0ba8f180c4ef6d2342f46b88d1faa3e2ca9099d3bd84b022cd9c5d89e0