Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10-07-2024 21:07
Behavioral task
behavioral1
Sample
3662eaf0aa3943d7dbbdee39207cda9e_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3662eaf0aa3943d7dbbdee39207cda9e_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3662eaf0aa3943d7dbbdee39207cda9e_JaffaCakes118.pdf
-
Size
77KB
-
MD5
3662eaf0aa3943d7dbbdee39207cda9e
-
SHA1
0369bb768c253ae54fef416c271cf8a2d602f0f8
-
SHA256
be4a310e4baf680b2c61f1fe88349cf2a346faf6630f16e539ac82d258b41560
-
SHA512
895f3a5f8df449472bd277964967f43d577f701782676c5a90eed148eb33f775bd2968496aee3bcca23baf1499b8394d2972a4e0091a8f9e0627f4d51c2696e7
-
SSDEEP
1536:yctNdZus7iMa/ZMcB3lBulF+lPLlsWtG8FfQ1FeOWJZNEIU8RIDPbvt2:5tDopMMjB3LukJsWtZQ1cOyNTU8RmTA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2316 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2316 AcroRd32.exe 2316 AcroRd32.exe 2316 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3662eaf0aa3943d7dbbdee39207cda9e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5920b629ff235bc7e9e76091813dd551c
SHA1c22a94b6453e7a4e7d512a70206f23174987806d
SHA256112383630feb2a2a04885f1e8bcf236f997c3c8a68a4a68ee9b0bdf09338714e
SHA512d989dfcf71ce92c794bb92ce7e6ea1557c7682bb39e558330682bcc834614694ab30e8deae2c8ed13e7ce0f62d06335d7d123f1818157dd00142ae372865a2d6