Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 06:46
Behavioral task
behavioral1
Sample
24fe9d4c825e597cbabcc15cc6d0fe29_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24fe9d4c825e597cbabcc15cc6d0fe29_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
24fe9d4c825e597cbabcc15cc6d0fe29_JaffaCakes118.pdf
-
Size
72KB
-
MD5
24fe9d4c825e597cbabcc15cc6d0fe29
-
SHA1
e4bf5690d3973269f956c53951b175e8b793e427
-
SHA256
75779025a945f9c602d5772e0936e00b7d20af1ad77d7bd685a2ce5e89e6071b
-
SHA512
854bb3868f5a51b450b9577c22612c67806160a4742a6de6922219a91134fb130e67ea5a3ca88d07fed4ea98cc9421e34a1015b617c61eea766f14f2118ad4f7
-
SSDEEP
1536:ZRQRrgsm33b3Zd2bJXF1T2RkHQSWpO4JiEz40oqySWUpO7JFg:7wrQ3jZwbJXFR2RCl43LyN78
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 328 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 328 AcroRd32.exe 328 AcroRd32.exe 328 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24fe9d4c825e597cbabcc15cc6d0fe29_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:328
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b53160f058102113a236e0a2a0cde4c1
SHA12f11e21da378405863bc15dae4ceb99011d2b27a
SHA256b179f0f11b90202f034797eaeabdad557912736f8a297b7844a0b174f9355941
SHA512be403460f4d7c9462de13597bb2b504a3e046ec72c1a8838da2570d37cd723e86a35332050b3223a13134c1771b9e262ee6fc7a8877c9653b317da6f2e5a9177