Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 13:45
Behavioral task
behavioral1
Sample
3d9e43b161bb1dd1de8b3042c5503b4c_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d9e43b161bb1dd1de8b3042c5503b4c_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3d9e43b161bb1dd1de8b3042c5503b4c_JaffaCakes118.pdf
-
Size
82KB
-
MD5
3d9e43b161bb1dd1de8b3042c5503b4c
-
SHA1
d80a2a273cdd48e8f76f0a31532320c0fdf959e0
-
SHA256
90e98c506982fa368b123b04c23499e8e826ac84096553a7ae4246e7668b4813
-
SHA512
791ea3df55d3093872e0fb907b3252d5ddfbd1e6cd2b83cea61846e8a1796d24cff5eac922ebd571ae10980949b8c9e9061b6e201c793ae7dc8c6c55aebfae48
-
SSDEEP
1536:vAzGTPAb9Y5P4zGoOdjjkSvwcG7I8mm4MNdQ5zumlQvWVjH1WF3UXkog7DWwpOSF:OkAb9YuzrOqSHNWq8vvWVjHY3UXkR7Gy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2224 AcroRd32.exe 2224 AcroRd32.exe 2224 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d9e43b161bb1dd1de8b3042c5503b4c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD568a2f4ea86d77ef6f28170e2e745451b
SHA12dfdcfab619f0b6fd76471a7b6d67d65235243c0
SHA256e7430ec5d3101a355362d8342140c3ecb2c6d1614f39c1715d2dc18d21dee91c
SHA51253bb61ae290f9247690d6caf7bf582c8156fa3a111e6fe27762774281ee7bd58185f9039da49ceaae0d583e04a9e5ce0eb53b5b5f154d4879005c65888077876