Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 19:53
Behavioral task
behavioral1
Sample
2d9d7ecf9c60684d18e4964fb0b9d61b_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d9d7ecf9c60684d18e4964fb0b9d61b_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2d9d7ecf9c60684d18e4964fb0b9d61b_JaffaCakes118.pdf
-
Size
81KB
-
MD5
2d9d7ecf9c60684d18e4964fb0b9d61b
-
SHA1
6d2cd30091e2267aa78bafba337451893368577f
-
SHA256
126b31f4c744ee154be81ea14c299909299aa4556e0d3289748ed1c61ff6cccd
-
SHA512
6d4929e6e7ec35c68cdc3e6e6e00656928d55ceebebbc9ab542a19b2b43ee7ef85e673bdf948425d10a4752dcd26603a957a912d6eeaf68baa3695864ce960cb
-
SSDEEP
1536:c8Ct6yWHufHcZcdAbsi4i9KISKwgAQbUuQjslv+ZlRWf9OJ:5C4y/EZlbBXNS90wy21FJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2360 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2360 AcroRd32.exe 2360 AcroRd32.exe 2360 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d9d7ecf9c60684d18e4964fb0b9d61b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55a193b1b68263203ba1a6715e28cd63b
SHA185e6409ce447386f10d62545689398a0265156b1
SHA256d3b6bf66ab8acbac37dff980c7cccb478db1ce5475b858abacc5292323750d85
SHA5124873d06cf9fabcbbfc6c48d41d8927788fe4000057701f0315de9cf410a62b49e7e1b83b60133275bb6c65ac15fffb1a7f1e0c26a3d568d6ff7557d4831cdaca