Analysis
-
max time kernel
96s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
16-07-2024 10:35
Behavioral task
behavioral1
Sample
4df028eba454fdbe29a5312f2693c3d7_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4df028eba454fdbe29a5312f2693c3d7_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4df028eba454fdbe29a5312f2693c3d7_JaffaCakes118.pdf
-
Size
77KB
-
MD5
4df028eba454fdbe29a5312f2693c3d7
-
SHA1
124c710f0eaaa7b0623505257c079b793bef5a79
-
SHA256
99cc06ab6ce7cbc64eb968beb142395d27a0f95a2debfe1657bab1ba2aaebf8a
-
SHA512
6f9da7dc7d729243e1f46670eb43b6273261c7a36ffb49a27ae91d4cc4ced85dc23c1a499f19b20b8afd006869eae0f0c1b9f1511b51b436711e7301b07a1aeb
-
SSDEEP
1536:SxiL4S6qnjqykJZocNVEbDqjHx5qBd5IFkJLrZRsP5WUrnEcJwlR5:cu4S6qnGjNVEbGS33ZaPoc6lf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1996 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1996 AcroRd32.exe 1996 AcroRd32.exe 1996 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4df028eba454fdbe29a5312f2693c3d7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1996
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a3c0563e2d8e5c43eb137a715faedcad
SHA1442cbfc3359e781db3e6368db7b6c85ad2fc2d24
SHA256ac8d04d3055728ea172def1bbf64835a6f11c910f43ddc3213995e4e0458e1cd
SHA512677801b84d86d79b5712f494c936588453b4d112dcf710a31aacdefa2465ffd051acec25686984a41e611013496ef192aa03c1c841da4dace3d7f83c1caaa39c