Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 21:51
Behavioral task
behavioral1
Sample
17a8f8c59fecc3713adc9cb9f4605ea8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17a8f8c59fecc3713adc9cb9f4605ea8_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
17a8f8c59fecc3713adc9cb9f4605ea8_JaffaCakes118.pdf
-
Size
76KB
-
MD5
17a8f8c59fecc3713adc9cb9f4605ea8
-
SHA1
9b251acbdc29a8e471da6ed5cf16de619f3b233d
-
SHA256
4f438d965d753f64dcd6891d952c64f3767e74289adc09e8b4060d0bc337f79a
-
SHA512
c806d4c4dd8e44ab15e4083d80d028c2bb793e17a994b171eed1fedd4414190d50142ffedbaec3dfebaa21103afd0dba1cc7086ad1f8791339566446d7600715
-
SSDEEP
1536:FyhH20H2pJEnrsLetHZ2foLo7XwzXqkLWGpOKCWvvVBteznEZt4:8nHtHcfoLo7XwzNMKTBY4o
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3008 AcroRd32.exe 3008 AcroRd32.exe 3008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17a8f8c59fecc3713adc9cb9f4605ea8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bbdee2167f569a6847f5d2203302cba7
SHA15d4f2ecb5ad5a501045cb5943f89f626c7e367e4
SHA2566eb3b6710214eb1ce3daefd386faaceef00406f12cd9b058d3164e9c1f8f0500
SHA51208807b74e9a995424c139454ec6e9e1cca5b2a9055961602b147b6ba3bf5212b63c1fe13e7b3d328d8c415751a61def04c9ba2b83c259af9edee05a125494b57