Analysis
-
max time kernel
94s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 22:29
Behavioral task
behavioral1
Sample
296d93ff07ec0d1cf9d0c7885825c716_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
296d93ff07ec0d1cf9d0c7885825c716_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
296d93ff07ec0d1cf9d0c7885825c716_JaffaCakes118.pdf
-
Size
73KB
-
MD5
296d93ff07ec0d1cf9d0c7885825c716
-
SHA1
db7c05763ce4d972ff5e5117d9582cd7be50d31e
-
SHA256
9d36420096cc04f43bf41f5ea01c6bc397a6cec009c93f3a84332155f81f6707
-
SHA512
7cea54167a30b4c4e6f0376619886d3d65b4c609c645c98b4fcb1484b95be23bee2c9b3336bc95d8267a3fa8814171e124778c856f612bd644d1f9fd6d0e7417
-
SSDEEP
1536:hLeXk9SAMtTxM1+GIKn+U71/eSBw+WtILXXUN+W8pO7UZj:pZ9VYM1+Zy+UBqnIHUN97K
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2204 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2204 AcroRd32.exe 2204 AcroRd32.exe 2204 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\296d93ff07ec0d1cf9d0c7885825c716_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD543993ffeccc4475653db3609cbc66a2e
SHA10d33781dcf64f03f6d5f585c82fafedcf4da7425
SHA256ed5e23d8c3bf813652b766a76e6269a3f3daf52fc76fce3ec9c40dddd3c32f9d
SHA5127fec1f7eda3a18ffc6077ed7fcfb27bbc449406f21ad82c0b2d32e2f9bb9fc206f6179210402108096fc128344bf6707b159a9114be92fd3ca41457047cedd4e