Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 02:29
Behavioral task
behavioral1
Sample
2eaf306fd8931968c0774d457bdca605_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eaf306fd8931968c0774d457bdca605_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2eaf306fd8931968c0774d457bdca605_JaffaCakes118.pdf
-
Size
87KB
-
MD5
2eaf306fd8931968c0774d457bdca605
-
SHA1
28b7a900ca74cd3d156ff81e304264d8867f8274
-
SHA256
a0a3921e4f59953ebc43e5ec4e469ada5e864a538ab279c9258ab4ccd78e31cb
-
SHA512
1b4070133976afad89202ef9721a831eff339c53194ad4c804de349281edff2dc084cd6131db6209db5b664465d9ba29b0fe87256845bd67c547851282ec821c
-
SSDEEP
1536:sCaQcVBUum40UQUA4cdQE3faXutHqLkDFEpWJ+JjipxuNi6WspORoOo:z7cVr84cdB3SetT42pxuNidRk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2044 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2044 AcroRd32.exe 2044 AcroRd32.exe 2044 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2eaf306fd8931968c0774d457bdca605_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2044
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD572e6d9f2a2c7d8fdb25bc9615562b21e
SHA133eba006198249b91b7ad03d5c2b2137c9fd25e5
SHA2568420be1860799999bddf03a2bcd76bb284ee1da51380e43087a0e43ae4eafdfa
SHA5124d57a4fc087db01578e92671e03cc02a86dbb5a1e3d85a54987c871a0fb546e5cdb5389ec145dd47781a7fcb2e6ae104f0234c0caff9f3588b1fd0f59ccf4ff0