Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
13-07-2024 04:44
Behavioral task
behavioral1
Sample
403ef4e6c94498b2f6df7bcd1240f9e8_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
403ef4e6c94498b2f6df7bcd1240f9e8_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
403ef4e6c94498b2f6df7bcd1240f9e8_JaffaCakes118.pdf
-
Size
9KB
-
MD5
403ef4e6c94498b2f6df7bcd1240f9e8
-
SHA1
ba3cf4b58a5d0ace5836e04afe019201b5eb9384
-
SHA256
1affbacf00b6a9d9dc3ed25969358c412cd9ab4c18bd9bc46eb4fd33064a5a99
-
SHA512
a647513a603541f23d29215add851c17c778a1022b8e166ddba6395326cd8264652f1cb86921657d0e9b0ef63a0df0fc0b87b72869f90d8de3f540adbc49c741
-
SSDEEP
192:CPz4ULMxLIKXHsfyxfT2cVeTDXUflI7apqhlBT95elOif7lRXpvgptLx3sdTXSxA:CPz4ULMxLIKXHsfCneTbUfYa6T0Oc5R9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\403ef4e6c94498b2f6df7bcd1240f9e8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD584c0846da46f701cf7a4612fdd4e3fd6
SHA1b7345806335ec40bc1bbf3b2ac33a0fc72139f39
SHA256451761b4572a76a31763b8574f09307ba9da03e6b44e12e0d0ce9d86f083e968
SHA512596ee76fc737838d5db83e025e45f933a9aaf24721ccae0438db275373ac5c871c4b5c49bb0da1810207e947f0700253c16541e8903ee83cd62df1441ca40428