Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-06-2024 01:04
Behavioral task
behavioral1
Sample
1030d06f99aa9076cbca42c17fae145e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1030d06f99aa9076cbca42c17fae145e_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
1030d06f99aa9076cbca42c17fae145e_JaffaCakes118.pdf
-
Size
84KB
-
MD5
1030d06f99aa9076cbca42c17fae145e
-
SHA1
c8e0e1afe3ed136afbe5e7925b4d026fdeba49be
-
SHA256
97a05dc5a07f12230289dc6a7f4cdf62795a5b19c73e79789b06c8c55e6d41b6
-
SHA512
b1eb429e05c64e64a6340d8c3d074996c83213f19526a76faaeb65e257283f214fc4a58a2a8fa4da01d394249045deb9bb47e83fbd29e78c19d6761afd5fb788
-
SSDEEP
1536:sppqHPO9A5sS5FMoAB24UOjSwKNCvsJjHW6pOu26Wq40WuAOzyP:Wom9A5sS5FMZB249jSDNBxcu2WHD2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2440 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2440 AcroRd32.exe 2440 AcroRd32.exe 2440 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1030d06f99aa9076cbca42c17fae145e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2440
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD545f3a87d34b806854e1eeef671af0ed7
SHA1872b502f729b6ec14f5a47396dded8770f55c3eb
SHA256ef60af30c9087eaa67247d8f0164be1b8975e470670ba4fa5417c9b23ad41c9c
SHA5126d8e891f6ee9aa656d8bf6a71853df58e70b742f938c2220af10ba568aab41e44d99c88599b03a85821ee74488081bd23c7edc6b7f03d5d6da4a898d1c6f1acf