Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 08:29
Behavioral task
behavioral1
Sample
1a9aee388732efcbaf8a097fad9d717c_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a9aee388732efcbaf8a097fad9d717c_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
1a9aee388732efcbaf8a097fad9d717c_JaffaCakes118.pdf
-
Size
46KB
-
MD5
1a9aee388732efcbaf8a097fad9d717c
-
SHA1
b8601df63e62795c29110c594dac157ce04e7e46
-
SHA256
83fc9f643d5a3dd90506006292ab174eecec249700f3e51de6dd70a1bca87304
-
SHA512
e401b768614e675911a497ee11f2552fa7c9838555383a0b99be2ed3e896cd65191fb712a86986a413bba7e8af86249e08f218f3ddfb8930f2455143753e96d6
-
SSDEEP
768:3gGzpDMppVeqpU6n/Z5h1s0wNE8oWKiMQTrhSwo3Khadkut8sEBg4FTktzx0mLGo:QGFwppjinhpyXf4FTA9nubn3cu+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a9aee388732efcbaf8a097fad9d717c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54aef5f78de0b81f7d3a097365979ee81
SHA1d2fe7a794d303f2cdface61bf4aaa14a828e252c
SHA25671291719941c66583645bacfafc1a3b1669577794a4810f28d36b3f80f6a1a30
SHA512b6cd6836f8663ab89b0182ef6716d9202295588c515a2259a66827a718bc6685a3bf53fabb005e264ec60b9d9cdbbd99282d8d231e8a57965e631ec75bddf0f3