Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 01:48
Behavioral task
behavioral1
Sample
59fbbfa67f4682282deb3f5e29734d5d_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59fbbfa67f4682282deb3f5e29734d5d_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
59fbbfa67f4682282deb3f5e29734d5d_JaffaCakes118.pdf
-
Size
179KB
-
MD5
59fbbfa67f4682282deb3f5e29734d5d
-
SHA1
ed49948084a3bec38f53366b8c2a026844e602d9
-
SHA256
0a47b6a3a0d74758ff74e42748b79b1c52619dfe0ceae6fa00b22be4109b5d95
-
SHA512
6c203ec7f578c617b9764fde0cc9955ab368e767a252135034287325bf0ab3c9d855909290a7f4d242aece9a5d53c8ca6e924651cfc35ccc21191af209f33a21
-
SSDEEP
3072:q8KZ8l1SHNiP4m8NFDHzwtYNEAs04A89cDdESI/ufH1vSa7JRwCfJ8:qbi1eiP4fFDEtJPGhICZr6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 600 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 600 AcroRd32.exe 600 AcroRd32.exe 600 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59fbbfa67f4682282deb3f5e29734d5d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:600
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bab4ab9def7e936f6c5a47dc110e3d48
SHA13734a78c8dd41672699ccb99e5fcdd69280e08a6
SHA25695a336efa68987fe62fdc6e35e073d0a799b557721cfe524e3404b693ed5da07
SHA5123a8dac5e55def82783f8afed58cb10236abbbe3a02ebdc35a1544ceef69a56fe0df596b2e093921776fe67f160eede6a04a043166bbe073988f63b47c35cd9ad