Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 04:31
Behavioral task
behavioral1
Sample
5a78f2d698afe7c09f5638c6cbbf4040_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a78f2d698afe7c09f5638c6cbbf4040_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5a78f2d698afe7c09f5638c6cbbf4040_JaffaCakes118.pdf
-
Size
55KB
-
MD5
5a78f2d698afe7c09f5638c6cbbf4040
-
SHA1
062a4a57da6e7919f18f6a83a4e9fd7e2ecd1d05
-
SHA256
2d1b3147cb6c20777d7558589f8d8b45953defd48d3a2249223a292da9d83750
-
SHA512
e25bddcd6eb9286fce38df26b555b9370e41cf79f6e71f179b2da6aabfd8f23f98ed9a405b160d78857737d99bf28d8b0ec38ca1eb3afce373dac19b54ffc5c7
-
SSDEEP
1536:hnVmd+KFr2McHZ6v5Ppz94vZDJh0p4TLqSGLAd:fMFqv5gtp54xNh0ST9G2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2328 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2328 AcroRd32.exe 2328 AcroRd32.exe 2328 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a78f2d698afe7c09f5638c6cbbf4040_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2328
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54257217dfcd8618d5e165b34c08b4fc5
SHA1dfe19abf960d9ccbfb96e1fc5ebcc95d6b76b4cd
SHA256b59cca9e7fedb7daa3fd14ed2db7c1022ca2f68ac5deaf163cce8364e2abc7c0
SHA512d5749327a046849f5bc6e6c7bed35c084cd427c4071f95f7254ad2bbea77e80181406de964a6fe23eddb2735affb3185880f5a4532f2c1fd3b488061bf5154e6