Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 10:10
Behavioral task
behavioral1
Sample
3cf2fd4c985b23c7e9a0c7492424f426_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3cf2fd4c985b23c7e9a0c7492424f426_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3cf2fd4c985b23c7e9a0c7492424f426_JaffaCakes118.pdf
-
Size
78KB
-
MD5
3cf2fd4c985b23c7e9a0c7492424f426
-
SHA1
520f170db68b48de197d8001a69fef3ad012d89b
-
SHA256
bf0622564a2eff14d29b0907bb571dc63d68fa109109a78006bb88456a04c872
-
SHA512
6a3387df6bb1995de39ab12f8c2721ba81074987b4fd6efb87b132d50c8522f15f0bd3af701011c81b4b4300947236df8e0faa261fda8fff2719bbaeeb998132
-
SSDEEP
1536:DAOiIJKEHHdDxEtAtUHSlPd+8DiW4kMEUIpkYWGpOKCWyvN4W1RFAm3:Jiyz/ISlPduW4kMElpktKaN4yRFA6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cf2fd4c985b23c7e9a0c7492424f426_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5607f5df95b8236cc6bd68a0c818b3600
SHA1a2c9b97b816c6129ac54d486070e85287740b0cc
SHA256971373b6c316ec6d7ad5444987a3b9702ad93b411e7af83f7074bd9784da1cde
SHA512a1c19f681b610ae1619af8b47b19847c8e26f65d754c6ae41996540ea5a31652381c5635a3ce113521c6d10eb12864407e2d1640452debffba5b2e71880ae8fc