Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14-07-2024 03:20
Behavioral task
behavioral1
Sample
4414722af4c1bdfcf3ec0e881a805710_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4414722af4c1bdfcf3ec0e881a805710_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4414722af4c1bdfcf3ec0e881a805710_JaffaCakes118.pdf
-
Size
77KB
-
MD5
4414722af4c1bdfcf3ec0e881a805710
-
SHA1
7a57c26d87abe117744ede48a7fdc05c98bc6321
-
SHA256
05bda7a7125e278f5793b4d4103380ae8fb830fa5a027f0f3e289ab7949dbb78
-
SHA512
4e9d14b82cfcd4eb888a2e98bdfa1b31f263513bf4fcfc7587e1649c555efd4f4d600aca748377607f24813188cd02b3020146688b9613bf7605b8165778d831
-
SSDEEP
1536:pQTHS9ncQgu/CY3EKdpkbMxIPfxbfzQxMp5PC/8WspORGWKDPhWRFSGpd:q4cFu/p0K3CMxCJbfz3vC/XRehD6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3060 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3060 AcroRd32.exe 3060 AcroRd32.exe 3060 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4414722af4c1bdfcf3ec0e881a805710_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3060
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d235941dbc96eaa1636583bd725919da
SHA1345efc5ef92f05882a2ed988303c33311912c316
SHA256d8c2b590984c0294dc974afe45f978c4489e8142dccd402d4d7e11637e4eb54c
SHA512d3775e08b67ea52de346c5c828036b1e22a0c6694d136041a2b6e4b104739a716a430679016e14ce9d80eec8cd06a55ee47291c0972c10efc75b3f1a6c1909f7