Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
04-07-2024 22:02
Behavioral task
behavioral1
Sample
2662fa7d12b38c8b4e826bf526b10433_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2662fa7d12b38c8b4e826bf526b10433_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2662fa7d12b38c8b4e826bf526b10433_JaffaCakes118.pdf
-
Size
16KB
-
MD5
2662fa7d12b38c8b4e826bf526b10433
-
SHA1
8519816e2e9381461bbf85942ff5f130502ad6e5
-
SHA256
6a65c7997c42e954ff4ec83dc91277b3327041046bba0d1297ab0cb7face5693
-
SHA512
f74c3f2390baefe696aca04d429fa084cdccdc6464284acb8aa76907de9530c283ae46b0a30559fec42b2f7a6ed5ea61e441252ac3b28d63d9eca2b4305301e1
-
SSDEEP
384:lPV14ypV8YdhWF2dLC5fh1Ce22RhkGoaxKiJwZZg9kIe42GGYP:RVVIMK227IRgt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2428 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2428 AcroRd32.exe 2428 AcroRd32.exe 2428 AcroRd32.exe 2428 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2662fa7d12b38c8b4e826bf526b10433_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2428
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e76c689cc5a9e7294320bc8951e1d101
SHA189463c3a69258931a0a72ce4515d68f358ca8dab
SHA256431e9bf6b625f05537c2361a7a8253d2512c4afde18ceca701d7e7dfb5527e27
SHA5120f3efaea7bf79731900f7964be7ff4867bc33c6b84453ff336ddfa6ea6dd6140c3eb48550738763ce78f8bb9d7967aa1dfbc0b934553123f9ff0abca1db916e5