Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 19:16
Behavioral task
behavioral1
Sample
1734f8b3eb3cf3190e36e7b811f01a80_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1734f8b3eb3cf3190e36e7b811f01a80_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1734f8b3eb3cf3190e36e7b811f01a80_JaffaCakes118.pdf
-
Size
68KB
-
MD5
1734f8b3eb3cf3190e36e7b811f01a80
-
SHA1
01450b58a2c3496f3b7c2fed00ece71ef37456e9
-
SHA256
6c8975c8cd0b415715f75902954b523b0c7185fbfdc28cc8e5195d8d5d58c49a
-
SHA512
220d1097f1159bae434d987d6f089c7a5614eb46e20917bf4c9dbb49039b74574bbf387c5146cfd7464c6848be8fa106b0aff572029dd7f2357e9f27f511d5f3
-
SSDEEP
1536:YEIl5K7DXYUjhUSJDo9zZLev00WMtsZyQ0CWCpOVi75naYCwd:ZXrp8ZqvAZ30fVi75NR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1734f8b3eb3cf3190e36e7b811f01a80_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a40aaa30783678719b2edaf5e9db8056
SHA138f48e9f670239f601519c1f5af942b787facd75
SHA256ade126e9057ba1c7f595b4d6f1dc7a5f28cab1272d3a40d21ccc3a7674dfb2e8
SHA5125085b6414e7180b4de761984e7b82fbafe63bdb0de4509bd1bd0a1759dbabc1cb138a0e5931d1fe9e7f791a465c960f694e000fa8d433fb76e0d254fec58ad26