Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 06:48
Behavioral task
behavioral1
Sample
24ffdde88417a9dde3d3f2fc4474be2b_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24ffdde88417a9dde3d3f2fc4474be2b_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
24ffdde88417a9dde3d3f2fc4474be2b_JaffaCakes118.pdf
-
Size
74KB
-
MD5
24ffdde88417a9dde3d3f2fc4474be2b
-
SHA1
ff9052acd9c24e3aab7a1b2ae8e74fb052ba1c31
-
SHA256
0e2b8e7068b32640d9683de89aca37170d7480a9afad5ddd122ac8c649593188
-
SHA512
fe12a8e2246a4c4cc8b635cb3a65b73599631107175f030ec9406d6946f06a1c8e9ec0ca8c80eeb89ab1b5bf0a15e34e219900d8c15cee15952ac42e76614734
-
SSDEEP
1536:JRvDbLe2uXm35bqKNZU//k6yPmU5a73jLkSeWOpOaZEWlRjQ32fUFdG0J71:fvHaPX+5bqEZDPmU5m3USzaZ82fUFg0f
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3016 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3016 AcroRd32.exe 3016 AcroRd32.exe 3016 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24ffdde88417a9dde3d3f2fc4474be2b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3016
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD597e34385636d46d99521d4bc0f1d9c38
SHA16b664311a99d99f0a1f1bd89b18b6142129933be
SHA25611c5bec311352e64ce22750d4849a9e876f757e2936d851028db86c425e3d584
SHA512cd0a8dd8f36c269171c9433b20a96aadd60bce0388bed16e0a267787a3385d3f880d72eca122c493cbc230dcb2065e1baff7359cd1414074a379850f7e773a7c