Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 23:28
Behavioral task
behavioral1
Sample
26a111ab03c07472e895200fb44d848a_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26a111ab03c07472e895200fb44d848a_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
26a111ab03c07472e895200fb44d848a_JaffaCakes118.pdf
-
Size
81KB
-
MD5
26a111ab03c07472e895200fb44d848a
-
SHA1
977bdb2eb4636a979c88e9a767a78504a4ed45f0
-
SHA256
92e9b9eec71b54c03afdff474f94bcbf63d3a073f57f219b4043c19f5989724c
-
SHA512
9d04d312773f99037fa5bc69e3c1e45a295d653054fb4456c4e17e1eb03343cf623dcc9e50ca84b82a9ec75b5193e6309961d9102aa063ed44888f4414cd2885
-
SSDEEP
1536:7/hJRgIxeofN2zOFDWHJrSTY6HNSE7PWHoR8FBPKWxApOGWXi4/8H2:BY8bFiHNSTD374oRsv3GWXimF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2116 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2116 AcroRd32.exe 2116 AcroRd32.exe 2116 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26a111ab03c07472e895200fb44d848a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2116
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD501272bc97b8e4ba2f5deb08f7e53b4dc
SHA1df2a50341f00b9185aeaf9f002b32422288bccd2
SHA256dae58114d0be314ac54186ad268037531dd5b3b58cef95f57fb7175e10b2b41f
SHA512a375b84c03f4efdc5fd48b1213db85300a591355b1b547ab1d8d2e466a9a2f6a404a29d4691c252410be93a5ff77b0f0192df079b5824528404c052efc47ffc5