Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12-07-2024 04:48
Behavioral task
behavioral1
Sample
3c07a7f38323dc93acbadad63321db3c_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c07a7f38323dc93acbadad63321db3c_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3c07a7f38323dc93acbadad63321db3c_JaffaCakes118.pdf
-
Size
80KB
-
MD5
3c07a7f38323dc93acbadad63321db3c
-
SHA1
8c01f7fcde05f523c8ea2a28660f37bf41243597
-
SHA256
87a85af88252761fc9fefe8320771a9fa702015d486e0d576cd1a6e81ee948ac
-
SHA512
1e20a852f6095eaa0170473eb1f0b4944e9909e3ae51f2b17a1f02de99127b54d561d79fc6c9c677f13549d8251070cbcc262dfe6e7b5c35172edb5b61710b90
-
SSDEEP
1536:k9NWe077PYX87r0+h0ZDroaVZwIv+0POOfWpiaoWGpOGKnbD+T:LeSBUmWDroaDwE+0POOiia9GKnby
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2540 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2540 AcroRd32.exe 2540 AcroRd32.exe 2540 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c07a7f38323dc93acbadad63321db3c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2540
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e95f1af5a1f3134bbbe5b208c9e9f785
SHA1001083372ab661ff8fd2559f77d2800cc59c48dd
SHA256f8c2b1f3d987d00c8d28033dc14f1da26c6bd15a1d1858522548283184e6684a
SHA512e9f98053aadc944987c93a1721575858ea6da21b4f21ce7146b6da45b248cda74616b9f63d4f1b5f2af140252acab35998974a895c958301ce1e27fb52b4827d