Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
04-07-2024 21:41
Behavioral task
behavioral1
Sample
2650956409562a0e8b2b1f7906b1f86d_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2650956409562a0e8b2b1f7906b1f86d_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2650956409562a0e8b2b1f7906b1f86d_JaffaCakes118.pdf
-
Size
9KB
-
MD5
2650956409562a0e8b2b1f7906b1f86d
-
SHA1
0d8c93a3bc2b42df0e6b62f93c66c4d238014236
-
SHA256
584951d9610132809d8dd49c7010d11022ff7c7d6346a895e02c5bc4f67406d3
-
SHA512
f0a798ab30987904cc8e7be80e433ba54d03fd3cac24324b047876f23d69e7ffa0c77df1895459990d630d97c605b50263e60ea160dc4edf756be4e0c954571b
-
SSDEEP
192:3Pz4ULMxLIKXHszsyQCiCz1cOLEE4migP/QRFaH+tYA9Zr4SO1x00RlkkCM:3Pz4ULMxLIKXHsAyQXCxU7hLAHMkSOFv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1224 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1224 AcroRd32.exe 1224 AcroRd32.exe 1224 AcroRd32.exe 1224 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2650956409562a0e8b2b1f7906b1f86d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD510961250512e5bd7573b312adb7f1fd6
SHA1d9022b3400fdd61658c123a97c9bf34204ca4a14
SHA2562fbe22906b54667059dfb0c3ef75f99cf5669b3a00c7eeed1b42bebf70d005a9
SHA5126cc263ef3f9e526362af77c08455faf9ac26f6fd20029dc369bde006b8715cb859877dfaccc1e41246e79170a6c06277a3c837363f9897ba46f1df37a85f9053