Analysis
-
max time kernel
94s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 08:06
Behavioral task
behavioral1
Sample
44fb9ba220a76d62a54dfd27ebadbeae_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44fb9ba220a76d62a54dfd27ebadbeae_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
44fb9ba220a76d62a54dfd27ebadbeae_JaffaCakes118.pdf
-
Size
35KB
-
MD5
44fb9ba220a76d62a54dfd27ebadbeae
-
SHA1
11462bf1e9fbdcba0482983a95c3e998d8b790a2
-
SHA256
c96e85e5560a6267d68bd1305e73a01ca35e359a875580828f5d6e87aa54cadf
-
SHA512
c6fff9d96529319e1734eac374a47dc9274816646f59582da0c91e46952983e1ca463e2b8de558b6aebef0027bf9b8bbdb852d058cc551838169bbdf30c987fc
-
SSDEEP
768:blmAXJIsE7xXv8tcFuFzo0JxmQYIKvN9XebWuy:pmIIsNI0JxlVKl9ubWuy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1752 AcroRd32.exe 1752 AcroRd32.exe 1752 AcroRd32.exe 1752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44fb9ba220a76d62a54dfd27ebadbeae_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD506ef7ae077f7f54b78dd9d1765960cab
SHA12048e62062de573e0231d427aa2366fc484338dc
SHA2568796fe204b3b8fcef480b16f0884680af1069c50406c8c126ae50cf40d70ea71
SHA5121cd73980e4549ba5b2b80a3328893107763c6ac2a262e3c71fadc3e03618a296c7a2df0f095cff3d2573f7b69870dd35bb93e89fdcd2c75e0728ac930df6ac46