Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
15-07-2024 18:00
Behavioral task
behavioral1
Sample
4aca9faa5ea3d9a94aab471c3842eee1_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4aca9faa5ea3d9a94aab471c3842eee1_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4aca9faa5ea3d9a94aab471c3842eee1_JaffaCakes118.pdf
-
Size
8KB
-
MD5
4aca9faa5ea3d9a94aab471c3842eee1
-
SHA1
fad89de899b8428c9f68766696f0ec8d970883a8
-
SHA256
2a42a8dbd7e11939f733c36907e28e3e2da7f8df853c4086e72fe3771b1b16a6
-
SHA512
01c4512f283bf309a071ed88c1c7ba90ee6d6bb5b7f80589f75a44b138015476fa22ebc57b4c1b2acc9f4b35ee8dc628c8723c2fdf201a0f1542f05869fdcf99
-
SSDEEP
192:1Uz4ULMxL1KtZys9+oOFBF2ZK82BCWzAeEeeY/6syFENeNQcO3srP:1Uz4ULMxL1KtZyw+oOt2k820iAeEeeYg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2416 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2416 AcroRd32.exe 2416 AcroRd32.exe 2416 AcroRd32.exe 2416 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4aca9faa5ea3d9a94aab471c3842eee1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2416
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c24158cc3ca92d667bb7ab1e8910ba8e
SHA15e8b8d62a58a9237e7de81f3e3b8dd30465c1f8f
SHA25686dcdd78e2e0c4bf2e9b91c65953d6679962951f7fcd3f239474174a23a7613e
SHA512ac021a1f98568ba9c06cf8012b928843cde3e9ad8c80932164039823f9373e22a4fbfb1573ba31eb2833d8465a717f659170f35eb5fe00cd2da57b1cb1bb9712