Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 22:27
Behavioral task
behavioral1
Sample
3af676488012f0a5e85bd9639c5e68c1_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3af676488012f0a5e85bd9639c5e68c1_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3af676488012f0a5e85bd9639c5e68c1_JaffaCakes118.pdf
-
Size
87KB
-
MD5
3af676488012f0a5e85bd9639c5e68c1
-
SHA1
6a316a4f33508c816cbf0aed596389c1663585ed
-
SHA256
7e0c4a81c0046cdef45633c9756b1946c2f1e8517bb8379baec19d9ce6b80206
-
SHA512
a793b8158522572e8c26a9de35e1034be3e7d2a667110df08590b422ddc774ce23ac48fc9eb12ddaccb975bf49fbd006e3c2609dd47fbff47b7e775e42fa9058
-
SSDEEP
1536:WLReGJGqQRBRoLNqhcXB2gPNI7c/5cFWAj2AFp36UWyi0ygiSSZWxApOGjMiVcoZ:tEGnONqhaogPOw/WpaDmi0ygiSS+3G7B
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2028 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2028 AcroRd32.exe 2028 AcroRd32.exe 2028 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3af676488012f0a5e85bd9639c5e68c1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a9ffbd2f4262262192c2438449fc02c1
SHA10b342232e8b6c1e3e3f4b1f886ae55915de0c6b8
SHA2561088e3383de1c9678d7bf7e3694a708e3240409445bcbcb12ed509af2b334a05
SHA51283146fff905f7b27310ff54ea0cf9fbbb29ef908f5f73e04749900dc016a429db74e796a79dbc578f00fff2bb0e39be9015eb460abaff5936924757e24b68a7a