Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 03:31
Behavioral task
behavioral1
Sample
4005b3607dacf97a9291422e84b1b1b9_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4005b3607dacf97a9291422e84b1b1b9_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4005b3607dacf97a9291422e84b1b1b9_JaffaCakes118.pdf
-
Size
95KB
-
MD5
4005b3607dacf97a9291422e84b1b1b9
-
SHA1
bb57b06bc517c4f46772b3c5b3e614b36d0b255b
-
SHA256
b7220c91cd1f6cf8b7bc2b99ab002652a5f82c995ae71aae605afeec347d4284
-
SHA512
1f2b8b7ddb9bda85ba6a7a4529284a2d10f40489c158f0ddc3899297e97b5aadaea7d35ee78a107a610377410abb31cfbdd0177718a0fb2b82fead431586d326
-
SSDEEP
1536:vOhmyewbLyELjlQb9k6Nxa1oFm8p4mFieGxU83dhCIW6pOu26WukIuV5sF:mZ6WjlQR++E8xxWLhCRu2U7C5S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2200 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2200 AcroRd32.exe 2200 AcroRd32.exe 2200 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4005b3607dacf97a9291422e84b1b1b9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2200
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a7eb4a183ef6e740aea23e899afbe951
SHA1e873757d0f50a378d3ba191893e8c18dd9182243
SHA2562e883506cb7fae5793521169c7727e3312bf0e46b2c55a65ecf47e5c588e150f
SHA51266bca375e65f0b06ebd34af0791b3bda3e7218c304405e2d27b3ee66992d046266fdfdf5836091b2220a245929366cf9b9a4f1122b1f0091df82ac5f2878ee95