Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 00:21
Behavioral task
behavioral1
Sample
0b7d00beca7f867ef633c0ef040d3e5b_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b7d00beca7f867ef633c0ef040d3e5b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
0b7d00beca7f867ef633c0ef040d3e5b_JaffaCakes118.pdf
-
Size
83KB
-
MD5
0b7d00beca7f867ef633c0ef040d3e5b
-
SHA1
b64a567a79e7c5544d6fa2f0a8d9ccca1c52352a
-
SHA256
de56547edc340271a7410184883472ab91374cc7392d2f17c560e86d042d050f
-
SHA512
53214d6001e41fef5d2e921ab681e0cd9abf2adedb86ccddded1262d95616c23bcd1a41b25e847972d660dd47271b9cef644721b23951ff8171b37e7fb938503
-
SSDEEP
1536:38Twamwv+ngiiqcKD+IgqLk9SmOP6vPDEGFh+ldWCpOViIW/BHhFTUrcV:+pggiixKD+IVLwPDEllqVivBHhGm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1944 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1944 AcroRd32.exe 1944 AcroRd32.exe 1944 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b7d00beca7f867ef633c0ef040d3e5b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1944
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b94439ea8a196e0b8c5e092070c9cd2c
SHA17d975b7c3c43e93563c81f087204708d72e1ae4d
SHA2561ec655d465cfbf80a87753e8d2a1bca1bcbdb152c4fba94126972b28faa86547
SHA51281236f7ca925c19fe332cc1bd0a0959ed81490f9f9a9bad4d61a4cb4fdb061d79c2394217bda1a5c3136165a5917fb59bc7995893782f8b99893d2078b6a089e