Analysis
-
max time kernel
95s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 21:58
Behavioral task
behavioral1
Sample
32212a19195eeef10cb7fa228854cb57_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32212a19195eeef10cb7fa228854cb57_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
32212a19195eeef10cb7fa228854cb57_JaffaCakes118.pdf
-
Size
79KB
-
MD5
32212a19195eeef10cb7fa228854cb57
-
SHA1
c142c8c462ee4c7feb02055fda352aaba160a110
-
SHA256
36e8b4065861a39ecf0f01a650f298168f647716db3dab4f89b57294e09dfbfd
-
SHA512
1494eb18272c306565769aee3a21ad1561dc27b3462b52af284066dba68cb174f5572b97f2c828ce9c5062f1ced2f4a046b6f38a0d071737f100c25dbb1dc7c9
-
SSDEEP
1536:jPLzT6pS0yrdfdlrl2L1bLLF80iBP5Wxovsj1iLiG2pVpjWapOn9:nNhrXD41bfF80N7sNqsn9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2268 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2268 AcroRd32.exe 2268 AcroRd32.exe 2268 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32212a19195eeef10cb7fa228854cb57_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2268
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD539f0bf0a26e512f2e9d1bccabba1f378
SHA198f58706a7f5227603f6f68290166f2d475f0bbc
SHA25668cfc84031b764b0ccf95a4e436dbf67f2f2e559807bae375acc695f0c59b8c2
SHA512c4b126de497aacb92eafd4c3d73a46d32ba141e79dc10093cfffb6d2f21b5c2f5b891d8aed2052a98efbdd3d151ffc840a5b052f8419500d94514c2f095aa13c