Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 04:03
Behavioral task
behavioral1
Sample
21048c7c92f9e9dae2f729c258cd263d_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
21048c7c92f9e9dae2f729c258cd263d_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
21048c7c92f9e9dae2f729c258cd263d_JaffaCakes118.pdf
-
Size
12KB
-
MD5
21048c7c92f9e9dae2f729c258cd263d
-
SHA1
03361874105fa805c036f8bb0fa3ed63dd5d0767
-
SHA256
eaaeb860c2683607f696f1057d21a7a816c7017ac1757307e31d799ec0690ee8
-
SHA512
c318a84d5b1b0ba3a33199fc89a7b352d9eab718885ddcb3ad5363aa835876417261fb54c42881a0c051ddf039c7d8b684a404c450bb898eecc73b6d305dc302
-
SSDEEP
384:HR1rRuOqnpUrNYNkUK7eixBy4Q6xZnfPp+Tw2LQelkuS09MM39/n0/r3FlvtWA:HRbQAnfPWPUeCAMM39/arV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2944 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2944 AcroRd32.exe 2944 AcroRd32.exe 2944 AcroRd32.exe 2944 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21048c7c92f9e9dae2f729c258cd263d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2944
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5967cea538ff567b7e6b0c0df1251ef38
SHA1aa015b607c261872d12bb10ae4b9aa2ceab5ce81
SHA256defdb0eef20edda7e8548a09b49dd66ba802070b712992949aebe2b398c4ffe0
SHA5127d05588e3502ae0dbadeb620903b0abc318092bd22822a8111fd9e29379ff51c46cf846a9f6ea7d4464d8986bb05d0450a652329d8f5146bbbcb6d6f5e06e0db