Analysis
-
max time kernel
96s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12-07-2024 02:30
Behavioral task
behavioral1
Sample
3babcb4735f653ff82b1cc9696824179_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3babcb4735f653ff82b1cc9696824179_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3babcb4735f653ff82b1cc9696824179_JaffaCakes118.pdf
-
Size
77KB
-
MD5
3babcb4735f653ff82b1cc9696824179
-
SHA1
859512b4f4322b18cced96c3a91db3d4f4602b51
-
SHA256
96afe507bd911eb22f226d7378a600649fd3bb959f8bdae10c263144219f5ef8
-
SHA512
618bf6a640ef0db12e481d8ba5ad7b5959fc7a87878e4bef9f9680654921d08edc4936c0cc0b200b3f5859338b960b240e2d7c2b0e859b97f4656ba42102ec48
-
SSDEEP
1536:kVErzlpcPUrIJYF6RhhKeHld1zXDpu8Hw0WxRviaQswpwW8pO+VMNO:QiW8IJM6RSeFd1z1jwVgaPsb+j
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1360 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1360 AcroRd32.exe 1360 AcroRd32.exe 1360 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3babcb4735f653ff82b1cc9696824179_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5160fa512b3e2bd04220c9f8de45bc80c
SHA145a7447bb20da2768caf26af980614340d80058a
SHA25619d35fc0d121ae6b631262612ac005a0a2db3fa881a7284092f6b7fb1ab96823
SHA5129481cb4576959dcba3686fc0c3e5751d81a56c49c28a358fbe41f4017ba0fff54eabbbc8c405c5dfa73e36c0b9818a5d7755b70308b5da19f64e2f0416cfe5ac