Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 17:22
Behavioral task
behavioral1
Sample
3148e67432fe4956815885dc479bf2f7_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3148e67432fe4956815885dc479bf2f7_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3148e67432fe4956815885dc479bf2f7_JaffaCakes118.pdf
-
Size
78KB
-
MD5
3148e67432fe4956815885dc479bf2f7
-
SHA1
2a1797b5a47f5785565fd9f1468a575dd0b88b4d
-
SHA256
a93922e88c859c0f4212593f9b0d53a641b0840d524d36df1039ea4c028e8afa
-
SHA512
7d4e45091083ee3e793ea7a3f92be2bbf60eb5a8f9da5ea50c6941c3153564edb7a279e5a51fbbcce1ace30850d45fc152610f32041e6b732841c802985a5eb7
-
SSDEEP
1536:yooevFXReZ14tVNLkH2xFdHEVjmuRekLr6/SeWGpOKCWjczTnRKR2s:FXG4dFUjmuR7rJKZczTnRKz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1984 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1984 AcroRd32.exe 1984 AcroRd32.exe 1984 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3148e67432fe4956815885dc479bf2f7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1984
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c4df63b502aa5a8dd4177aa864922f71
SHA16fd76cdefdd58b83d816728f438ff72b84031b68
SHA2560f21901783325dd1e2403348d1ac8089398e64bd8c95cacbb555d310e4a7c99f
SHA512e220c688433ab42e0a3cf18a27dce8229ced0720f9dcc392d1285fd02add6f5af36b9ad623a0f0e97a840858201b49e7fe0fb103d1bb20ebf57596111cce9b98