Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 18:11
Behavioral task
behavioral1
Sample
2920d71820c93bfd066f75c65b41a7c1_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2920d71820c93bfd066f75c65b41a7c1_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2920d71820c93bfd066f75c65b41a7c1_JaffaCakes118.pdf
-
Size
70KB
-
MD5
2920d71820c93bfd066f75c65b41a7c1
-
SHA1
f5da4bce048ed2588a1a0fb72b61429ea516355b
-
SHA256
3b209ba1ced62c981b5d7552f02f27802ac8ab36980226762337030e522f6eda
-
SHA512
13ca52c9414ac98b3bed2fd8001649935a89610a8aa675b6779f08fd55b833ee40517e8e010ac91c0fa7c1036f6bf1deca61e0c1715e04881224745c907a4f65
-
SSDEEP
1536:/+WS5wajB6akCEpDEF7jcmdD/O1g1g/PoDXNqpi43PohLsT339Wh9K:E9B62EEOkgy0phQhLsz3F
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1940 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1940 AcroRd32.exe 1940 AcroRd32.exe 1940 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2920d71820c93bfd066f75c65b41a7c1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1940
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59bb7441d81ce39c9e49c6a9254eef40f
SHA11a3caed7c8134af8d850d1431fd9ef20f445414b
SHA25664972d316a0495283532f224b88add62d97343ee9049f89526b12ef6be403615
SHA512ee7f4c4da714dda782c09333abbb8a55870134d456902ee07382d762bfa69a362cc720467d2d5acdf8edfe8f6ebd2a5a03dba7c0adba7a5905a4a62ee8a48103