Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 19:40
Behavioral task
behavioral1
Sample
3ea0d72e2d29847e115b93bc1cad5a65_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ea0d72e2d29847e115b93bc1cad5a65_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3ea0d72e2d29847e115b93bc1cad5a65_JaffaCakes118.pdf
-
Size
72KB
-
MD5
3ea0d72e2d29847e115b93bc1cad5a65
-
SHA1
f89d98a743c7f047500e6c55caa67886b0c30207
-
SHA256
d4b7e5fdbab1d4034bf06ddd3b509adbcf8540707cb59c21bebbfa0c8379261f
-
SHA512
c0abdba59e6969a234db5ad36cc9198e2b90d25a6a7e783c76d283d4ce2d9271b51129315f56d80d67e3641c52d2ae568ba0a6d4cfd81dc55082dd86baf4bfc4
-
SSDEEP
1536:zEGnj/d/tPDjh7/Gfpkscj4hsYxRPq5pAW2/7yum7ScNoWspO2gis:QGnjd/9Djh7+fpksw4hs2pwpUeuuND2M
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2840 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2840 AcroRd32.exe 2840 AcroRd32.exe 2840 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ea0d72e2d29847e115b93bc1cad5a65_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2840
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5731bce03c9b65f782c94428c4612adf3
SHA1957a464b8a1dbd768623391b1b59b6b182855d77
SHA256b893e98b7cc3e10da4773336d550dd5335c80fc907909abb0a5799c28926236a
SHA51227fffcd76627ce4efdac26c6f47fc4168fa7dce49cf513258e386dca3145f5d78289cfb7f8ec7d5144c88988035751dcb203854903ae1e892ec5808279d8d822