Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 11:38
Behavioral task
behavioral1
Sample
348f1d5d069c0b56abf77d0ec65ad496_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
348f1d5d069c0b56abf77d0ec65ad496_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
348f1d5d069c0b56abf77d0ec65ad496_JaffaCakes118.pdf
-
Size
77KB
-
MD5
348f1d5d069c0b56abf77d0ec65ad496
-
SHA1
d24aa2d2a7f08d2c8c2e4753f2ea341d219fd367
-
SHA256
4d0b2e61fe5923e9ed533b2a35988cfea5572649c4ee708c8e856cf546e4015e
-
SHA512
c72417971c8bc6ee1dc16cb0155056860629f1c4b04199d3ad339f46d6ceb69b3ccae688cf3064150506b0fe5e98a2d3f021900b549870c6c4ae2867ee6c96c9
-
SSDEEP
1536:RZvVJIucMGjHTvkrI6lvcuf5HtzOYtcCNxnWZ34N8fQsLROWspORgYd:nv3INPDWICvcuBnxx6Y8RLRhRl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2248 AcroRd32.exe 2248 AcroRd32.exe 2248 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\348f1d5d069c0b56abf77d0ec65ad496_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d887ac1449dbcc21418eee11ed5fbf19
SHA17c8867a14a9c4c6be02de0e99ae4d6f7cc34820c
SHA256d4b138f61072ac50a4804442bb793ce207511d848f574e83e457d5b803985b33
SHA512efb6bb0a3622c2ee71d1a9df95686e7000caa19781335bf48ed764ffbe9d3519877e649f5d2baa592fe368419606768634c94ce7404ef0661d483c7115cf713b