Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
16-07-2024 09:11
Behavioral task
behavioral1
Sample
4da90fa7eb4a395f8111ebeeb25ab024_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4da90fa7eb4a395f8111ebeeb25ab024_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4da90fa7eb4a395f8111ebeeb25ab024_JaffaCakes118.pdf
-
Size
68KB
-
MD5
4da90fa7eb4a395f8111ebeeb25ab024
-
SHA1
b59ba729b1adfbbd183e3de1848acc090a29957a
-
SHA256
5121511b0012a5d91e6cae01c29ce423569f7a44dd500fe30c692d9f6dbbcfe6
-
SHA512
8e2a59915fb342453739a707243cea5c3e8585fd99cddee3a8dc8c9c5b2da97e0b38049b3ea656a8a8fe24c3216c5a7b743f886f27484fa16399e26fd29d37ea
-
SSDEEP
1536:/iX84fa7KlH9ZkbNUJcEfHdRKGdhbSOMoXuVPVYQpvHTY4HRcp:RUagfkbP69YGxkV5zY4Hs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2848 AcroRd32.exe 2848 AcroRd32.exe 2848 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4da90fa7eb4a395f8111ebeeb25ab024_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2848
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59a76c11e12ec9c9f850859f0d0d29a9b
SHA10bc01fee76bf214cb7573db08247d134ddc65abd
SHA2567da2a261f8c64e10c88a0d2b1ef99837900f6086db081910f0c5fa2901a9b5f2
SHA51253c3b7bdc11d722a0d2592d1cd1ae25d890e1bc0c8d6f7555c2315480d2b495f66451a3abd4a98d2668c120366dd15103997a90f5f3d38188fb6316a68986832