Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 03:19
Behavioral task
behavioral1
Sample
378365465876469235f8de02dee8028a_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
378365465876469235f8de02dee8028a_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
378365465876469235f8de02dee8028a_JaffaCakes118.pdf
-
Size
79KB
-
MD5
378365465876469235f8de02dee8028a
-
SHA1
a22891116291d7bffbfa78e1a1cee8bf071696ac
-
SHA256
4eb2c7d3970dd36f358d8aaeb6c28c24b98f4649cd33be3100d8b96f72f5075a
-
SHA512
af3fe65a0f9e5bf2fab2b38caf23d1442b892736992e0092f349c4285686237f6d4a1c8a910f8cf2d8dff9aeeb76f5c1e3613d8477b6c5dbcd698e2391ae9b60
-
SSDEEP
1536:InX/FfjPRoSwjNnwqm30mhUQMUIWZX5duid5hNz8OWOpOwrowbUlxr98nT:ktotwl0oUQMXin8jwroQUfr94
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 536 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 536 AcroRd32.exe 536 AcroRd32.exe 536 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\378365465876469235f8de02dee8028a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:536
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a09d076b908d0babddd47af1b85f7664
SHA1de71d91362596e3ffad403319b525aef7ed569ac
SHA256aea11faa8e8937f701f5142d2f40648349801e729bcd6a5f4a57224e0bfa5f14
SHA512eb5748cb5592cba5819f98dec5d6e64e86796cecfc85217ba761f586726aaa7186affe3aac5bcff9233561f8fabdfe790c5bd975fbe8fda43ea5255b5879790d