Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 04:45
Behavioral task
behavioral1
Sample
4cda3f8d7903d95b5da9e2d611e1a74a_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cda3f8d7903d95b5da9e2d611e1a74a_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4cda3f8d7903d95b5da9e2d611e1a74a_JaffaCakes118.pdf
-
Size
70KB
-
MD5
4cda3f8d7903d95b5da9e2d611e1a74a
-
SHA1
8c6c04862216b7323f97ae7c15b5a3e795ddecfd
-
SHA256
6026dc547070d55947477a1d72a923cafa3345b54708b925ce2eac14a36acc58
-
SHA512
4935bd63a8de760cdc24741881e2f10718817f80d578a8bad05380296a10d18607c8381a57729930e55c4319e2e2d995e1820fbefa590b617394b925201cefe0
-
SSDEEP
1536:QSMtMjg+XIaGyw07PtBNGwhF9qJGWpJ/KyEBRpWUpO7J4q+:TVXIaFwwPtbTFEHYVRM7On
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2616 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2616 AcroRd32.exe 2616 AcroRd32.exe 2616 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cda3f8d7903d95b5da9e2d611e1a74a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2616
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55d4006e1dcbee4d9d5e813c5987b67fe
SHA1efd2f13056272c77c1fcc094fe8ddb4e9b8fbede
SHA256298dd16ba02599557d9d835ac4ed4ad1edf06991bc9700534aba25056ca903a6
SHA51244e321fe70195ffeac52edffa369d85f9d62793f2c3601221137953648b117db1c5a626d95f7892efe69090413f7f7eccfc70ef8dfb2b70c91eda3eb0678626b