Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 11:16
Behavioral task
behavioral1
Sample
4e1124b02eb24b2bb477ca3d2d055291_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4e1124b02eb24b2bb477ca3d2d055291_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4e1124b02eb24b2bb477ca3d2d055291_JaffaCakes118.pdf
-
Size
69KB
-
MD5
4e1124b02eb24b2bb477ca3d2d055291
-
SHA1
cc34ffcb2d9915f2ff137960b5e26151f4fe08e6
-
SHA256
05e4f4ca7b2a6e691bf02fa2fa289c588b7a25898732d8cae1e8a4588ebe5161
-
SHA512
e599b562f5ea5e223882cc773a01314e87a10254eaedfbed7b8962ce54194954df37236a5f40d7c06ae62d91242191a9a0200b39bff7f3a9b61f9c81ce5792c3
-
SSDEEP
1536:BMw7tg0vwjTxx5UQl3GmyKcCylfVeiIQtf9o6W/6h4bXU0WKfbm1:DtgZj1x5/Ym1ylfVh7fK56OgRP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2224 AcroRd32.exe 2224 AcroRd32.exe 2224 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e1124b02eb24b2bb477ca3d2d055291_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fc1af3b67af1960db29bb50d689c7689
SHA18ca620d62daf4a66192dbf8934691e12b0217f64
SHA256ac46c240f998dc7f07165d5e5178a512a7e3d2378fc10ae7f9d3c5493baf1d72
SHA5129b76f6b60895ccecf2f9ffb839dd2412eaedbf7c4deeb8f7c03003893ff0d6032af9ed250caa1053d489faa1825c34b2d646e4e505535699ba944d7e3a9c2775