Analysis
-
max time kernel
92s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
09-07-2024 06:23
Behavioral task
behavioral1
Sample
2f49e5fa154fcde9dea980a5420c02b5_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f49e5fa154fcde9dea980a5420c02b5_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2f49e5fa154fcde9dea980a5420c02b5_JaffaCakes118.pdf
-
Size
12KB
-
MD5
2f49e5fa154fcde9dea980a5420c02b5
-
SHA1
4c51432383cbb786f8e84e3ddc8b17bbbd032e21
-
SHA256
9d75d26be550093d510e377ef25268ca212e3573a4cf37fb527cd2360f951c86
-
SHA512
04733c70ff83ef53aa34922c70ae7f7b5c538b5325d573c82bcd65844731d20d35640f634b9911147aacebc942ef308f746aaaa9b29665891752250e5d103d2d
-
SSDEEP
384:mPz4ULMxLIKXHwSbyW2Ii/5B3bfpas2xTLFbp0FX8mmf2tI5gwwkQq:mb/uZXpR2xhBbopBLFbpQzI5n
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2560 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2560 AcroRd32.exe 2560 AcroRd32.exe 2560 AcroRd32.exe 2560 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f49e5fa154fcde9dea980a5420c02b5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2560
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a97de729b1dfec69f6e4bdc0ade680e4
SHA1e621e555b4acfcd706380dea54b66e0c5950d0de
SHA25690984d6bcf327e2c8d75f09c5a5c1c7a650ee5f56508a7b2f4e8f80c3ce9a8d0
SHA512b1c853e54a598a54399aa12968f6783dbb2cccfb926f6ceb495761fbe89b9de9a2970262f03dda2f00c9584fc78d1bdc40a7dc7b1970ba1729afef494800013b