Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 08:28
Behavioral task
behavioral1
Sample
3ca72fc9b9465a01a79b87c96a5cf348_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ca72fc9b9465a01a79b87c96a5cf348_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3ca72fc9b9465a01a79b87c96a5cf348_JaffaCakes118.pdf
-
Size
94KB
-
MD5
3ca72fc9b9465a01a79b87c96a5cf348
-
SHA1
42dc1877a3af752dfce63de1b5997a770fc8da70
-
SHA256
31ae52e86d6aafd2ab2345611be3054a0e28f350331912f19f14c79c90a3e0b0
-
SHA512
b4e3a14e135e7d57f3e74ee546d4e2f2594af651531f8c467185e4125ac3ddf1909a0f8c84374f59df681833d29437cc2a0ad720e4f632331d82941b327ce0e9
-
SSDEEP
1536:q13XQirrzS+Pmpw/dlMpCERiYP5vybRFA0/VZL9sWcpOm9WLEmB7NNRQs/y6zf:SXlGQTcBfP5YN//B3mnmBPRQs/yi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2568 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2568 AcroRd32.exe 2568 AcroRd32.exe 2568 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ca72fc9b9465a01a79b87c96a5cf348_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2568
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59855b021499f16a29a90ae50c34d8220
SHA1fd131a187830fab0c2df978fc733efafc670b9aa
SHA2564a68209166e108b1638ba317ba33b1930686e007ffd044b0b03e777178ad40c6
SHA51241f08abbdb37099bf536bee96715765f4e200972135e58441b80dcde3e179a300835b721471d2a29f90bd00aeb0347ff3ceae7549fbd93a84aa24146ecdce962