Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 04:57
Behavioral task
behavioral1
Sample
37c8686b15e602b7d5a3d417cd3b345a_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37c8686b15e602b7d5a3d417cd3b345a_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
37c8686b15e602b7d5a3d417cd3b345a_JaffaCakes118.pdf
-
Size
16KB
-
MD5
37c8686b15e602b7d5a3d417cd3b345a
-
SHA1
d8c0da32a8d51d11b9abf569cdbe34e36ad3e2d4
-
SHA256
cc6666fa479c0acf7e6ac4c4e7615e09e548ffb5880a5cede2bb7bfd2ea1a347
-
SHA512
61c1c9574c2577b692fdfb6ea62aa6fd5972533d8d57ae2e76962fdb7939c155f99d9443ca4d2996917acb3c0e841805d98f9e57a07c265fc9fa1b7ecaf2fc03
-
SSDEEP
384:1PV1Ctn4pDr1oh5kA5OSt7L6fGAB1w3y97pZcZ7NvQb/2GGYR:Hr1oFgfGAX4g7cZ1u/V
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37c8686b15e602b7d5a3d417cd3b345a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5036fab4341613921865e864704f13ca1
SHA14da7d9cdc9d49c0d27483d9b265a2cdd67a89571
SHA2565d1b2ab14008a7031f6b6bcd7e3975eea5d219dd080c580715a8b93a8a69c6a0
SHA512d109242e7cea21b7969812f90a3004575c846f38a15a21d74b6b767bd4cbd93d914fd693876c357417ae6bd2df0d7708065e7078778b949a18eb5871f9139deb