Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 17:29
Behavioral task
behavioral1
Sample
2333d0e80277101842b29e9c998b49dd_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2333d0e80277101842b29e9c998b49dd_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
2333d0e80277101842b29e9c998b49dd_JaffaCakes118.pdf
-
Size
73KB
-
MD5
2333d0e80277101842b29e9c998b49dd
-
SHA1
b1d8be77aaa7601549ee30ad8325ec36d1837dae
-
SHA256
8391312757e22d4bddb5d3066d238be80f608578eccc06e8210dcaec4753baa3
-
SHA512
ff4e929bbb984516ec995bda73f405965ad8edaf7e27b65667c4eab59e876ae8eb9cd978e6d96fe108b0e8f04c9f52630b0b346a9952d0a506b07bc573e5616b
-
SSDEEP
1536:tVF8pfKNtPVI0TE2wWB3dau8SbCls1Ed0gKFWVLN0mA:BRVIAEMBNgBGhFWVLNg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 836 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 836 AcroRd32.exe 836 AcroRd32.exe 836 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2333d0e80277101842b29e9c998b49dd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:836
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD560e634390ed39a0321964a1d16e650eb
SHA10fc3fbb055f6217506fb7a2a239fda3924ceb951
SHA25645279ca1c00edf61b4fdf865c6435708d3c11f23edff4883764007b5c993a9b3
SHA51217be85cb5f190a84a89f11681f4f25d6557713e9a8a3f96dc9457b4d4bb91b61d978ac16a5df3ac0abbca85df32150ed84da809027d96a2be2d08bf9e04424b9