Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
11-07-2024 22:32
Behavioral task
behavioral1
Sample
3af9aec5153cd84f537edc32a2560f10_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3af9aec5153cd84f537edc32a2560f10_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3af9aec5153cd84f537edc32a2560f10_JaffaCakes118.pdf
-
Size
88KB
-
MD5
3af9aec5153cd84f537edc32a2560f10
-
SHA1
d0361cc542da8db8701a0db9dfc5ea9abd036b0d
-
SHA256
febb17d645b04c58ddb7c62d817a44cdfa508c537932a371c97ac71206e91d98
-
SHA512
8afa1922a47b7e65d6b97a041c3fd1e9b7b8f36398649f8c9b7c7fe93f7e2a2c316e5ab6b0a8ace539fb1fbcabed8abc097d53c771912dbc83ed691f5ebcacb5
-
SSDEEP
1536:yFg4Y/NBq5Wn0xa+VV4d1JaJ9TKt1e1dhhuI2nLbHtthgix5EqAPUGIWisek9Ww3:p4Y/90hm4Jae1dPqXHnr5pA8GStkkSN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2292 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2292 AcroRd32.exe 2292 AcroRd32.exe 2292 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3af9aec5153cd84f537edc32a2560f10_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2292
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59fca5587a642dfaf8aea2701b4e212aa
SHA136fd1991a69386890ec021522b4f94079721ea3d
SHA256dc346348449c6d8a6ceba5ff4ac75b643d469609985c320026176e070c0f0047
SHA5127e3d32d472720655e0ff4393b4472842e7e1916c4d9a16efa1bd35c515962d06058d5f949fb0eeee2b81f0e4f085072af10f6e676c33f3ac00c63a43649e6a0c