Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12-07-2024 10:45
Behavioral task
behavioral1
Sample
3d0e6e2f1cba707656f78a321936d28b_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d0e6e2f1cba707656f78a321936d28b_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3d0e6e2f1cba707656f78a321936d28b_JaffaCakes118.pdf
-
Size
77KB
-
MD5
3d0e6e2f1cba707656f78a321936d28b
-
SHA1
07db9f9ab99e845044ec3716304a0ccd690052f5
-
SHA256
0104cf8030a576840cb82d5257988411cba4a3bf460d314648eaa3e325d4aa66
-
SHA512
4244b4acbb426884adbd1c0fa049519a718de7b55e739bc5de174e37e3679fe244f5bc3a4f98d2ea630ffbb130679a78575d4d388a6da2701595ab4e76a65371
-
SSDEEP
1536:oT/b/oJhYPEPU76g87boQPBSDdOcESd6o5Oew23IDQOJ:ictgkok6dk061LoCr
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3064 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3064 AcroRd32.exe 3064 AcroRd32.exe 3064 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d0e6e2f1cba707656f78a321936d28b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3064
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ac81ee01f62bb21c6b6c73cf9445902a
SHA1967ad994822c814aaf234d1f3552adb76a27d599
SHA256cc2fa3d1e6dca068ac5d403d7c291b540de4f7185c9ac9e5d3688d5a14f8c449
SHA512f26c04a222e3444d9346d9a732e127aa6171867e8679bc7d07b2e61817994131a65e6457d4925d6e9ec20ec91d3abbc98b80ceff88dca91773a8483cd4ceb85d