Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 09:42
Behavioral task
behavioral1
Sample
4547c0df834d15b6a1902d4d7fa65e65_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4547c0df834d15b6a1902d4d7fa65e65_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4547c0df834d15b6a1902d4d7fa65e65_JaffaCakes118.pdf
-
Size
84KB
-
MD5
4547c0df834d15b6a1902d4d7fa65e65
-
SHA1
e74b626d2fa87d71002c510d43f528ba1824f39a
-
SHA256
1e39c555881084d79dbcea5311307c6f19ee980f90464b9649ee2c0bd9cf9f53
-
SHA512
2c23955cdd19a22494d1ce1996ed1360c34fe86d3c879ea5e78eb7b6a234c074916bfe405d6451d23cca12ca8838d93f7fc77d3e77abe78257e8023c03c04f44
-
SSDEEP
1536:oOobTIw9JBmfGtDOsbVVdFTMrR9LldUHbxKGWW7LpTr2WGpOmSfbHc7do:sbkwNcG0sb9FTMd9LldU7xKGN3msbca
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4547c0df834d15b6a1902d4d7fa65e65_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5eb36e12261ea5abf3d8b5978fe331d9d
SHA168229fe1befe08463737393b4f87004bfa26a638
SHA256a3371e9f5e188f84c9105243d75a05d5adab0897af5ffbecbc3b9fc8915c592d
SHA512c6b329553892add7050226fe1d158f3e3bd20dec261aba016faba4c17512d79727bca27eb11221d24dcf4e85c8b7a7596acfd92bdcd0215594d8ea963c06fa17