Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 09:33
Behavioral task
behavioral1
Sample
5b5fdb2fa66b30773c74fcf88da035cd_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b5fdb2fa66b30773c74fcf88da035cd_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5b5fdb2fa66b30773c74fcf88da035cd_JaffaCakes118.pdf
-
Size
87KB
-
MD5
5b5fdb2fa66b30773c74fcf88da035cd
-
SHA1
62dcce7aae66c2d670b0369cd04d902da095f360
-
SHA256
bc51eac75a749039c2f726eceff7ccbbb7f8c97b7a982d2f8a4c3ac63e76d669
-
SHA512
16728822bf212aedeabebc6be79981d9ce3659bf2cc31804d82b150fbf8c284df793c26c586b98adccde673988501a8df0cc00a6092bce3a6a09599c58d5724b
-
SSDEEP
1536:VZJeEzYSk4xWVDkXg7IfA9Kx2QYCVdJvoyFUaQLFdfsjAuR0s1elW5D4QL32W:jzlP+fYAwx28VdyyFUamfPc1eo4mv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 348 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 348 AcroRd32.exe 348 AcroRd32.exe 348 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b5fdb2fa66b30773c74fcf88da035cd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:348
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d21eee40f834842507e2fc0e91301747
SHA1aad84c226bd258157be91b6652d2a3f25e203ad2
SHA25657e89315e8931cbe725d8bcfbdd1d96ab3393a5eea26fe6e8fd18182c6700850
SHA512b37752d51a885c9b145522489248d6b6684203b0e1ad68da02194cdaf72aa3742cc26ac3eb260603b55a16b2cfa38eedc9651b30a1cda513cdcd295738167659