Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
03-07-2024 14:06
Behavioral task
behavioral1
Sample
22a0b7bc33ca5dcd01459694750930bc_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22a0b7bc33ca5dcd01459694750930bc_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
22a0b7bc33ca5dcd01459694750930bc_JaffaCakes118.pdf
-
Size
72KB
-
MD5
22a0b7bc33ca5dcd01459694750930bc
-
SHA1
dd238588ea82391333b8ebb8aaf878f18f8e79e5
-
SHA256
d4f963902dcdb07d6c34980804aba198be3c3fd156930838a65992c815fa6781
-
SHA512
1a9426dbd37a5369de8d5c00197948558e354aaa217134a4de9b0ae781601bda515e24b98dfa0658cc9b4fc9be746db4cfedd473941c7f9fbcbe446e9ee2d248
-
SSDEEP
1536:EhXI05qMz93jcRB41ZBdc7xVM1X98WHR6bi5cmWapOtQGm+9aMv:aZBpwk1ZBe7xVM1NjRy/7tQGm+T
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2056 AcroRd32.exe 2056 AcroRd32.exe 2056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22a0b7bc33ca5dcd01459694750930bc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5694093f53d4c88c6f965a6e432f6718f
SHA17edd59d6caaca11638d4ac5a4590605105786f2b
SHA256f5d5ff8d224647d94e2986d7c266f288ab779cffd608108982bf8aecc9cc335a
SHA5128ae6e9a786a462e750f284676a39a572f3314ab584d6d4de0e869a76178fa7e4110afe111ab2bf516ba0a4768bb3bd035d3354db0102624ff793de039ae561ea