Analysis
-
max time kernel
91s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
15-07-2024 20:24
Behavioral task
behavioral1
Sample
4b4240f1ee1019913050a995b577b39e_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b4240f1ee1019913050a995b577b39e_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4b4240f1ee1019913050a995b577b39e_JaffaCakes118.pdf
-
Size
12KB
-
MD5
4b4240f1ee1019913050a995b577b39e
-
SHA1
5e1d1573947604e732c8e92ff2893291f911eb11
-
SHA256
e4284383a8a16071fc42004279ed6fbe902de5e97288f4a4bac6b99760b99608
-
SHA512
0c4afd8e50ac0341fa71a922bcec4c802b402f64f557a62f88d8058b88de89adf8d85b0013ff97faf4bee66895188a2d06f0f254c6a7d569ab251f704bf328fd
-
SSDEEP
384:DLEMMLEtysyUSR+UH3HYReR+UH3HYRLbcjrbWXuL98pRPFOF++:Dg/ghST3YReT3YRLbcjrbWXy3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3044 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3044 AcroRd32.exe 3044 AcroRd32.exe 3044 AcroRd32.exe 3044 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4b4240f1ee1019913050a995b577b39e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3044
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a66447b55fb31c151cd428a06d661979
SHA1f5b21d6d355da907dfca8e5408f3f2a559777f5d
SHA2567354ae08583f234b583646c2f73f252605f0b902f461b6d6d49a3207e79c5687
SHA5127393791ee8a86a69991f69ce52ee4ff1a1530aff1ffce6f30574a178d7d9cd0058a8ed7e47f946704782d19fe7434c3410fcc21e59cf8ba7f01eddaacc0a4ab8