Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 08:28
Behavioral task
behavioral1
Sample
40ecd888e0f7f4b7f8a1c37d82c05d6f_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40ecd888e0f7f4b7f8a1c37d82c05d6f_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
40ecd888e0f7f4b7f8a1c37d82c05d6f_JaffaCakes118.pdf
-
Size
175KB
-
MD5
40ecd888e0f7f4b7f8a1c37d82c05d6f
-
SHA1
a3120c5a9df43f8f008b9b94eda61983beb2c396
-
SHA256
9082562c031b4aa0fd9cd7ce94ccc15c7e35acd49e5a3c48e688cf175eff4a06
-
SHA512
2021ae60f0b69c25a249dd35c9e27423b26c9c70972873a30a683979997ad6121661515bc18dd18e89f37356cd0a409b2a4d400c2452f362145dcf62fd5f0e61
-
SSDEEP
3072:Y12BtRwGj2+X0g8WHbXks93F/S0lyrt3gSgHVBb5XENIVwcW7q:E2Btfjgg8w9x9ypgSgHVBWIS9e
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1952 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1952 AcroRd32.exe 1952 AcroRd32.exe 1952 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40ecd888e0f7f4b7f8a1c37d82c05d6f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1952
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD558c8fcea6cd0cf92ccf957739a4a0ef5
SHA145cc5e9a5f042db8167d35435e5a265113269a4d
SHA2566e58a9dbd20ff0d04d9f49560872fc511ce176cffd44d9a23217460125aa691a
SHA512c6f72e610f6d74c754ca12389d6e2a75e6157b31998b4e45a2823cdb211c544825a00de7a824296a0f85c8deae7e6d96810bd7a652a8a7e18e7b944a901980df