Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 05:22
Behavioral task
behavioral1
Sample
5a9fb4be76c44b0c6f143916a3e355e8_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a9fb4be76c44b0c6f143916a3e355e8_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5a9fb4be76c44b0c6f143916a3e355e8_JaffaCakes118.pdf
-
Size
78KB
-
MD5
5a9fb4be76c44b0c6f143916a3e355e8
-
SHA1
1f29aa71aed5ff0ee51c910446c5724ae81823c0
-
SHA256
f1a6f2f365a75b95c030c89795a8880c7648516cbc75da625da8c108bba9f4fe
-
SHA512
bb82e544b51224069d542c5f0aeae59137924bd26857e13ebe2d5df64cb1d1ed8041adf4038470dbe2d661d7edbd9606af812b14accfbdc53f98904940beb59f
-
SSDEEP
1536:LUCeblW6SbZWpXleIQEoqk2MPg19g6chWj4FyMwNs15SxvWspORJbQ9:4CiSQpVeI0lPADu1sx+RJc9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2548 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2548 AcroRd32.exe 2548 AcroRd32.exe 2548 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a9fb4be76c44b0c6f143916a3e355e8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2548
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD549f6183a18c7b0121d1180f2d72657f0
SHA1f5772c534e64a7daa6de42b053735e83b2a269c0
SHA2561c2ae05ebfa7c2a0994731a055e7c9b1d008cab8b24104390f799aad63f887e3
SHA512520551adf28d11c6481f6dacb2b32ea3629ffe93cbb976b6948b4604f75c81507a560d243c4cb26351688cb920816e50a31907b928ff703709a4319fd3854c35