Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 06:51
Behavioral task
behavioral1
Sample
4d3923c20a295c9923c9897ba8b1bae1_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d3923c20a295c9923c9897ba8b1bae1_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4d3923c20a295c9923c9897ba8b1bae1_JaffaCakes118.pdf
-
Size
89KB
-
MD5
4d3923c20a295c9923c9897ba8b1bae1
-
SHA1
783c09d43ac9904156decc5a0a2e237e63c20222
-
SHA256
11e1a860a88836e98bba278d167d467052c58f18395bceb1facb2bd88fd843f3
-
SHA512
4e19812001e162cff2cfae33f65aa73ca28c4dd8950f4b6d75e0e9de453047de40e97fd0df095d56356b8d9b57fddd28540587bf3630f98de411fc7847a5871f
-
SSDEEP
1536:Km9oRidZBqZH1u0Y3s/ZMejUFhtOiVX4W8CxwWbsRpTgt88C74SWcpOm4q2:798ZxBZMlFhxIW8+sRat8741mC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2772 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2772 AcroRd32.exe 2772 AcroRd32.exe 2772 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d3923c20a295c9923c9897ba8b1bae1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2772
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55ac29946549251154e9c4184a12ccf78
SHA1ec1f18748c47355dd5797a5cb5afaa485b21505f
SHA256b5a077e1e312c5ce4ba5dab518b02ee9e842646124a704620e33c9559d987d09
SHA5122bfecfe626c78f0a9a43db486b9dbc5eda7e5bf0da2805bcabbaa4d42cf7b4cfb3811b2a806f645a79a11ebf2509137dcb4f7434ef9a6b9da386edda2a0630f5