Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 16:54
Behavioral task
behavioral1
Sample
31359986b3c46832969b51d0bbea7a38_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31359986b3c46832969b51d0bbea7a38_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
31359986b3c46832969b51d0bbea7a38_JaffaCakes118.pdf
-
Size
107KB
-
MD5
31359986b3c46832969b51d0bbea7a38
-
SHA1
0f3c6d5a490aaf8b9cdc16abfedb12639bb264d2
-
SHA256
bbadd03f3db3048ebb35b6248b33665992f8d5033864aba98c2d2be9fdb16a6c
-
SHA512
9d572c6d2f80fc38b0f78e84d9537f6849f4105352693c142c8666c09088706bf3aea0a91d196107d49c0bb8a1b51373f4e6acb115ae8cf04e7350a47effdc9e
-
SSDEEP
1536:BM2I/R69nsoJWR3YRWN5Yy+ESyjxf5DiZLWLJBohry9WPQXAWMgPo9goYpWspO2G:NNLEvN5Yymyjxf5+hQiy9AQXkm3I2G
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1968 AcroRd32.exe 1968 AcroRd32.exe 1968 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\31359986b3c46832969b51d0bbea7a38_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57c5ef59af5370d8721480f0577537ad1
SHA1b97bfa8f17ba381d523e66f503c8b976aa5fa0a8
SHA2567f495550df547a136706e3a36f1743a797c332b58b1ed994759ea2825d4b4ff5
SHA5123761f400e955ec8aeb27cd0ee298ce475d257990a50a30de03a1202fbb5525d06590f5691557695b46df5663697ddf9ea650edd44f0ba1f26f305389efb04c69