Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 05:53
Behavioral task
behavioral1
Sample
24d9f590cd14d8aaef054d438500354e_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
24d9f590cd14d8aaef054d438500354e_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
24d9f590cd14d8aaef054d438500354e_JaffaCakes118.pdf
-
Size
63KB
-
MD5
24d9f590cd14d8aaef054d438500354e
-
SHA1
4f3328388f14b691be0c6669b9141d1cfd97350e
-
SHA256
ec98d630248e86a618b6c9a45e89cc2af10d1e85ad9ca888177a7ed7afacdc01
-
SHA512
9d4c1e353232ab834a271d2771b948b229035d40e389d275519769cca7edf633a4233291b6477b3b451c4753f5a32e968b5459ffe0c7f2ac66342a034facd4e3
-
SSDEEP
1536:+NtGGtMd+Jg409BE4NgmGAqwCt8KcDttQeYSEqAdsVFWHpOvDkBxQ6:zGtK40gXAot6DTpY5qA+jvYS6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3032 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3032 AcroRd32.exe 3032 AcroRd32.exe 3032 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24d9f590cd14d8aaef054d438500354e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3032
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50ca616a7afa5b51291591d94ca4c58ef
SHA1e4078e5e4b2d5d1b7d51b39ba54637503a60700f
SHA2562193aff036b44f677a9f469cd243aec9fa3fdd5b74958d0232d374a59c74d181
SHA512eec2daadbddf814eb4a85222afb720c01242b0b7914f88830a6c1f8994a535b304d07bf9f7e54e67e4a6bb46770547dcad84ef5ec40769163d84c63a345a6ae5