Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 11:55
Behavioral task
behavioral1
Sample
0df96181c8760e995d3bbf9dc96e5479_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0df96181c8760e995d3bbf9dc96e5479_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
0df96181c8760e995d3bbf9dc96e5479_JaffaCakes118.pdf
-
Size
52KB
-
MD5
0df96181c8760e995d3bbf9dc96e5479
-
SHA1
9f9b4bcf8fa591ed30d25137ddebf573da8da501
-
SHA256
d372b26c8927ec7a39a88c14d389f7e3ed15e5cead358f3f04e53a7e6ded270f
-
SHA512
06bbeeb95a2f7d57118591fea1490458c5514fc163ab55c2456ef7bac869bea5dfb887981233e2c0b41d8da487f8d243fdc31e3c475254db6c88e16ec3968fda
-
SSDEEP
1536:a3QC/RJkRM4QKnwCLWzck9tgbfuNUJLf39a0kNUI:Y3kWXoCtNUJLf3g0s
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2420 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2420 AcroRd32.exe 2420 AcroRd32.exe 2420 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0df96181c8760e995d3bbf9dc96e5479_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2420
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5977e7fe6e2507555e0dd43276b0e898f
SHA1410d49c8ce0e0776bc87a030ca44a103bcc233d2
SHA2568a3f22db15474bfe9d05ed5945659c7601ca5abd20338a0b12537e5f0ecd8a30
SHA512b076814409f8e183cb9ab165a5b4b6c937cd198cbf4afc40e292d73661d2fe0d07837364f185ebccf3fc48cbe73c63809fdc6e7d11d9c082fdd4997490a4b0f9