Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 02:59
Behavioral task
behavioral1
Sample
274e6e52d1eadda805942852e1ce397d_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
274e6e52d1eadda805942852e1ce397d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
274e6e52d1eadda805942852e1ce397d_JaffaCakes118.pdf
-
Size
70KB
-
MD5
274e6e52d1eadda805942852e1ce397d
-
SHA1
64d7d8b79ece7e916005041f00b275e469dc28ee
-
SHA256
5c5ee3c90387e352b446f0614f2c0de3a50b5acec473cedf727b57b1e84c773d
-
SHA512
19d31098720f3fa990ed4a7b5d0162ea595b20ce7bd37636d6b76948f61aa105acc11befcd35fa9ebb30f6e6008af20df2c2982feab584798b43583a9edb1d44
-
SSDEEP
1536:G32zNrszXUig9FjjI+06jZBB7qw1WWwR9WXpO/y2f0L:vzOHkVjIKj/Buw1yRX/i
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2444 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2444 AcroRd32.exe 2444 AcroRd32.exe 2444 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\274e6e52d1eadda805942852e1ce397d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2444
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f56bbef065716d8d5af5ad65cce09be7
SHA1457115c2e2dd3a1a35e45bd850f207a090123847
SHA25643806145a92ecb3addf9f044145e32b6c95e11083d9b82fc17b9e71812105a7b
SHA51207d28782a5c8c2c0c21b79dfba9e374a4ae3bdb539f65624f0f88ed98fcc572544a7f63b256564da1d73305a793dc88e3cb537ab32d97198671e0439329d8ae1