Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
27-06-2024 09:50
Behavioral task
behavioral1
Sample
158daf3122fa3ce24d3b08b8d57ddc5d_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
158daf3122fa3ce24d3b08b8d57ddc5d_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
158daf3122fa3ce24d3b08b8d57ddc5d_JaffaCakes118.pdf
-
Size
8KB
-
MD5
158daf3122fa3ce24d3b08b8d57ddc5d
-
SHA1
38cdf4098d711554d5bef22aefef4cb68aa42471
-
SHA256
a36d7e6a18aef5373f6ced4926aeda0216efdd3d8c3fe81145d7e609f549e104
-
SHA512
644252ec48f7236bde6470f7b3d6a91e5b86e80c9766f609c80d10a66655b9af1366874b2bafff64fbee98f0d9071dfe7bf2936e9b61aae9f4bcd88d7a2162a8
-
SSDEEP
192:HP5ufk7ZXeHw+LK55OppggrUErddOvIR1dUAks7vYQKyZqtoVJ2Y9:HP5ufkpeHpG5QEIUodOgTdUARsXtoL2m
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2332 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2332 AcroRd32.exe 2332 AcroRd32.exe 2332 AcroRd32.exe 2332 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\158daf3122fa3ce24d3b08b8d57ddc5d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2332
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d2941351627f0022095e8a6a16008e12
SHA152c6cb7039bc785d6fb159b96deb18bd5f4521d5
SHA2564be8aa6e43c9161b098b7b6f1dec74a4e3cf9b1c558ecadb4c58257610b610c3
SHA512492f9226fd2fc2c3572b7cec0de1e319dc865bec35d66c3458f93c929d5158cdee6a4c59324b74310babc5efcda54780c6f3890c0b91aa7042cfbcbb25b834cc