Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12-07-2024 21:03
Behavioral task
behavioral1
Sample
3edfaa100e7372aef5f8ee692f44404d_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3edfaa100e7372aef5f8ee692f44404d_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3edfaa100e7372aef5f8ee692f44404d_JaffaCakes118.pdf
-
Size
81KB
-
MD5
3edfaa100e7372aef5f8ee692f44404d
-
SHA1
4e15cf18bb576a890b107256ad8b651ae193049b
-
SHA256
a085e2eac1ed848201a2e3d9a6eaf076a81217f947f3591ba9a527d5d128e156
-
SHA512
27c545c32345244d33c386e2c40318ef6d6f0675b0ccee0595113f890c89a94242e09e7e3228c30513351bfca2ab96198ae9f4044d53d82cf5cf13f178503f3e
-
SSDEEP
1536:Vp/JY29a7TkomwUjy6L62+HLBOJDwfXG+aWxuzXOwbBhWspO21fZ:hIkfwUjym62+rBOiG+azXOwbBQ2P
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2136 AcroRd32.exe 2136 AcroRd32.exe 2136 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3edfaa100e7372aef5f8ee692f44404d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ab93405c31023e59e4eb379dd5be19d9
SHA1a7c45a7a17ceda41f85188b224122437866b900f
SHA256122e48c0c3f0a34db07e8c6cc82583dcbab91aee0ebe884a9a03b155b547f0ca
SHA5122d44312e5befb835a1ec8a4fca04b4ff52d49b4ba973eb9dc8f4b5550aab80b5671d56d94d707acaf63774fa7307d7eccb2458ec4d71aa947728313ddcdcb40f