Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 06:13
Behavioral task
behavioral1
Sample
4d1dafc129259747213e6ac4c3749fe4_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d1dafc129259747213e6ac4c3749fe4_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4d1dafc129259747213e6ac4c3749fe4_JaffaCakes118.pdf
-
Size
81KB
-
MD5
4d1dafc129259747213e6ac4c3749fe4
-
SHA1
2fdcb0d78ef4bdaf77ec7fd4684e61e57a5d3bde
-
SHA256
558e98f38c77cc0832055e54b63a543a45ee8a813f9fe2085e84cdc7a8d5bdee
-
SHA512
a71bc373cb7039cc1673d068df1e5d1bf0afdb2b4ee0860237f53193f6cdf56938ae439ac0d50f4132616e9959ea2457d952becf874f1f15eb57d18eb51d283b
-
SSDEEP
1536:nwq73BGypZqP3Q7pZN69/2I6HRT9aXtmbrTbEUrdO2rWQpOCoW6MGG93yqly+bE:R73BGAcPKpW96HdQXtQTE6dO2WCrGG9G
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d1dafc129259747213e6ac4c3749fe4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50c29b94723736a842aa2f50931ce90d2
SHA1d2d8c66049b64099aabecbd45787ae50486d164c
SHA2563433e3a9fa4def486fb0e58e23f28ed0066c1425b4ea339ce9f9f24479f0f135
SHA51203edb2b2157cdb3496b0b08f256f14b8b6bd41be2fcf2a9f65464d3ef725e01b722d3b3ac9e2b3945bfe060824c88d63239a48739beea62268572009f6c6ed3b