Analysis
-
max time kernel
91s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 06:25
Behavioral task
behavioral1
Sample
4898bba824d902cf9cf0e4e66d1b5249_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4898bba824d902cf9cf0e4e66d1b5249_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4898bba824d902cf9cf0e4e66d1b5249_JaffaCakes118.pdf
-
Size
8KB
-
MD5
4898bba824d902cf9cf0e4e66d1b5249
-
SHA1
989ff6f59c8eab0db766aea142dfffa1dc5712da
-
SHA256
dd9879248e996c6605128f648c13f12dd9e43789f07cf052c8dce69003301c7c
-
SHA512
aea7a67a6fd7695c9a9960695689111d21975197ae6f0d014697a0db91ead9c5545bfc733378eee0cc5a54607220f9472e07b5edcd6633fa63fa7d254b933ee9
-
SSDEEP
96:bON06mxdw+7/J5pFHrv+SadbaO8lvCX1+Rm5PpKr:bONbedw+DJ5pF69+PsBE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1080 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1080 AcroRd32.exe 1080 AcroRd32.exe 1080 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4898bba824d902cf9cf0e4e66d1b5249_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1080
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52a0536313a9fd22b192ff10b4aa6c7c8
SHA1da672eb8ab376a835e6303bf4414e3334de45397
SHA25675fae6f190288ea436846398fea0c8372939c6e536fa574c13bb767281871e57
SHA512284ec44cd5dec82c2071611fba6aaa7fb469af7c63e086f4dcef918db069bed4e15fa77d0a7085c20243bd436fa7218890c60081c282a21346156826a285cdf4