Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
16-07-2024 11:16
Behavioral task
behavioral1
Sample
4e11e331f14fd33232dc53a55d582091_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e11e331f14fd33232dc53a55d582091_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4e11e331f14fd33232dc53a55d582091_JaffaCakes118.pdf
-
Size
34KB
-
MD5
4e11e331f14fd33232dc53a55d582091
-
SHA1
2ff5ce1b5d6bcbf17ad59efccf084031af06c06c
-
SHA256
ee4419fde1d434e39f1eeb0e4dc44478ba14461dea513b510f2be4f443368104
-
SHA512
9d021060b5e40a7fd44e2890b75d1032c3da0ed498cbb2683829643dcbd5ef16bb544e037ebaae9f5f6b49661ec0ee7671399c61b3dc8fdc1a92ea78564a10e1
-
SSDEEP
768:XLBgEpRsKONsNjRyhg5I5LOTfB7t7KC2NkTo0:7BzFONi0hgW5LOVgCkqo0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2440 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2440 AcroRd32.exe 2440 AcroRd32.exe 2440 AcroRd32.exe 2440 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e11e331f14fd33232dc53a55d582091_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2440
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5511ee9dab9b2adb374c8ecbc0c996ff4
SHA123b1c51aa3b6a82da892c841c1f3ea9abea9317a
SHA25652bd69c6b5eff6991402252cab8848d95bf425eb03d1d71adb191879360c287f
SHA512cd1eaf3e03889e3429c373b0f3d0fb68eec57ed9e3d546ed60adfcd35205bce1618bc27a76b9809da08d2b0c7e242bcee81f3a635937bfd2034e2f6e7d2c867e