Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15-07-2024 00:15
Behavioral task
behavioral1
Sample
47666396142ddde02d5fe916f2cb1bda_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47666396142ddde02d5fe916f2cb1bda_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
47666396142ddde02d5fe916f2cb1bda_JaffaCakes118.pdf
-
Size
76KB
-
MD5
47666396142ddde02d5fe916f2cb1bda
-
SHA1
37975bae32b9d9c7699791d0e3720fd14906d319
-
SHA256
fb1f9ea000a00479fb767949097cf3408ed3d76b54776340f52483cda007ac09
-
SHA512
161ba439e9de6db4f1af82dabcb38f840056a3e974480ed4163ce3e982f6bdcced36c401a48e58094edd5958c6421dae2da6fd6b7389a85ff20b6a0f88bf91df
-
SSDEEP
1536:peG/Xq4yHa2z+RJFfkbhoeLOl2ObRcWhb+WOpOaZinWQFA0U:0oXq4yBGr8pLOlNVTaZ+ZFA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\47666396142ddde02d5fe916f2cb1bda_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53d5ec8226fa4f83d5ee2dd2ff32fbc65
SHA171caca1144bfde2cdbd9c9c35af34075a9b0180c
SHA256c4cc0726aba9df1d94d367484aaadc8143cb24616baa6a6d52bca895708e9223
SHA5126828b9d25ea0539137ad9cd48e542bd37b80bdeb479c38f5f0fbd2c766b5007b7c4b6450a223b0d297050f0f58f42bfd99b015ba8bbe98bcb7eb016a110dd427