Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14-07-2024 05:05
Behavioral task
behavioral1
Sample
446b98ad09c260e821e20758ed41b48d_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
446b98ad09c260e821e20758ed41b48d_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
446b98ad09c260e821e20758ed41b48d_JaffaCakes118.pdf
-
Size
8KB
-
MD5
446b98ad09c260e821e20758ed41b48d
-
SHA1
97ade0d880e33ec2255696ffb1f3c1035c76c9f5
-
SHA256
6bed7b1c2ad1807dcf4432ef32bfbca72d2c21546a500d9cf83281c17c5e9418
-
SHA512
e10ac24ddf0bc8411cb19be7de809e77240f0ae7d712f99b29f789179fd9dd34fdd4bc9e29bdcd2b35987f28921824caf61a492262d59607817f0d103f8dd5b5
-
SSDEEP
192:7P5u7kBvrb8qGA9Hyk+2cq8HkQCaGNJP6fPXts2mGI2R0o4jYu:7P5u7kJbHr+t9EQ7GNJiHts4IkkYu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2356 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2356 AcroRd32.exe 2356 AcroRd32.exe 2356 AcroRd32.exe 2356 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\446b98ad09c260e821e20758ed41b48d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2356
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5229272988b39a9790181c3ba42901446
SHA1e5d1fe4624453e5b96d4354e8c7a8cee70037ac9
SHA256a7c8481464ec2259c3fc86f3ce4c3ad695fb03f9cdcd28e54ccf239ec8c54405
SHA5129e0cdfebe20bc0e6cf02956d7270467d4a64aa8104895ed5840c685ca04e60edf322b8bbc0bb96132fe20102d6e9095ea77db71fa06d0cf098071ae2a68e77ef