Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09-07-2024 09:21
Behavioral task
behavioral1
Sample
2fccbf4081b9f5c8cce995728ad41f93_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fccbf4081b9f5c8cce995728ad41f93_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2fccbf4081b9f5c8cce995728ad41f93_JaffaCakes118.pdf
-
Size
69KB
-
MD5
2fccbf4081b9f5c8cce995728ad41f93
-
SHA1
1db46bf5cf43d213b465cbac0b34b973200134c1
-
SHA256
bed423d592e3535ee944c3b4d5f1dabc540d4ba3276b6792e402d45983d8fea2
-
SHA512
ecabd2eb71345c03ce239f8d08d14d4b6aa3ad640b9911e1538ae2858c7a832f21a18a802348a52b30e478fc2622b2a5ecaaf6e3c7bc4fac95e41d47790a43db
-
SSDEEP
1536:04czrmT4rWKE+SrHY8yXWCpOVidfTluIWeWWKma/JQ:tcvmsC+SrHY8zViLuuWWtaK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2332 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2332 AcroRd32.exe 2332 AcroRd32.exe 2332 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2fccbf4081b9f5c8cce995728ad41f93_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2332
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54953346460fe786567eb50021b9dc747
SHA16289ea7f497caef728f7d9e36acd656728239491
SHA25664bf41a446b67bcbbf8f63aba62c30c4a42c2659b29f8eb2bd82fdb559e8348a
SHA512dc12d3b4ac2c450968c92683cce766830abf03beb2aa0bea25c0d0e5f9be6beeebbcd95656b177dab61b92d093c14279488cc8f40506a64fb3ab9439a87f8332