Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/07/2024, 07:54
Behavioral task
behavioral1
Sample
29d685a9a361793242318fb4b5279de1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29d685a9a361793242318fb4b5279de1_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
29d685a9a361793242318fb4b5279de1_JaffaCakes118.pdf
-
Size
70KB
-
MD5
29d685a9a361793242318fb4b5279de1
-
SHA1
c37b2f2801ee0aa53d900c739c67b3ad7669deb2
-
SHA256
076440c68af9bad17817a133b10c88b82691ff89ef982d13c53476f70c98dd68
-
SHA512
310eae337e190fbaddd4a315c2ad0160ae7deef56211f39aff58e48ae3cf2c158c302b1c1ad50960ff19c8c07af96a7529e02153e8779735091cf907b5bac597
-
SSDEEP
1536:LZViJSFKUc4PMkmKBy6HVDAOzbtY3ZX7zUO8:VViuTPMkm8VBS97z+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2880 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2880 AcroRd32.exe 2880 AcroRd32.exe 2880 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29d685a9a361793242318fb4b5279de1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2880
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f7fb44fb4763b43c4d4485db29dc6f42
SHA194ebdfc3c157de4c2532e0426c1f2eb18e2f62a6
SHA2562f449e8eef45e6f54d45a057cd33475d1c131fa2f9305c7e2bb6c9930e85866e
SHA51298478761cbf6fbc2ab5a9134e089c197ab8ca08b560f4f8c3fcd3026c8bc95a5bd45313c5bb22223fef69235c7afc662ccb3da0dbf74abf578513622c91f03c2