Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 16:41
Behavioral task
behavioral1
Sample
4a85df47f83ffd572593457f2f5b56d1_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a85df47f83ffd572593457f2f5b56d1_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4a85df47f83ffd572593457f2f5b56d1_JaffaCakes118.pdf
-
Size
41KB
-
MD5
4a85df47f83ffd572593457f2f5b56d1
-
SHA1
bee242dc9eccaa3b934e14df33b96dfabae4cd6f
-
SHA256
986efa226c8b8434df5ed2004e0a775d4e01d98e51e5e3abc129fab3e2164be4
-
SHA512
69dab1b240616e6c6cc115b0e07473b806e06553ed8a948988cb5511536917798a94792e0192892221952637629f1aa7849f50fcb9bbfcafa806d621404919f9
-
SSDEEP
768:Ljf9+UA5HQoMlpU6udyj1ba4PF07RTxIlgTmyslw/FkIhLK7:LjfHAVQpUjO1b190RqiCl+CQK7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1716 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1716 AcroRd32.exe 1716 AcroRd32.exe 1716 AcroRd32.exe 1716 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a85df47f83ffd572593457f2f5b56d1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1716
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56ea8ca8db365e70bffe749d9a8d0c3c9
SHA199dfd2d9506572de4e2a381a1d8d5789e61015d3
SHA2565f1079090283edeb6580e55518b1049b4cf678d15e4536d1125f96945ecfc87e
SHA512b6ea28714b187833c157ae20244234e803f15f7737b5326efb297f511f88c4f3c277d6a49f22acc92c905279e98e0073b12bda8b670896742a67393c18e12fd6