Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 13:37
Behavioral task
behavioral1
Sample
5c2aeaa4e6a3f13e09e82215435d9743_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c2aeaa4e6a3f13e09e82215435d9743_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5c2aeaa4e6a3f13e09e82215435d9743_JaffaCakes118.pdf
-
Size
89KB
-
MD5
5c2aeaa4e6a3f13e09e82215435d9743
-
SHA1
2b344448c2ab3537193c60d04858af4b477e2c65
-
SHA256
31b905e8066c167948d44dbf40585af3f2f946a0bf3343e802c9202eee180120
-
SHA512
2f343a00d08850efa7f6bc749d725c23b00969eab941855e6b1966c0240eca035d64ef6d7f7875773a8eee7650b1b6aca09437d8d929266405a3284d41bb4f93
-
SSDEEP
1536:OGXI9pW4/h48RDu9gTqeZg5ryaCo+XWxApOGzWAtgq9FJEkXl7QJ:FXGc45IqTtZmF+Y3GTgqVEkXly
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2288 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2288 AcroRd32.exe 2288 AcroRd32.exe 2288 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c2aeaa4e6a3f13e09e82215435d9743_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52a20a37ba669ecb922e5d110d386b0a9
SHA1f2cc86daee03bc218af9fa127a4c4d8554189e77
SHA2565e2e703c7d6eabea105639e07984e75a0fb6cdc4cc8d2baeefc67629221f53c8
SHA51239a3fc599bbc1db518715b301b359f3b5480c2b9019cbdf93b663d54f6610367cfc638eb28f7e1296ab223a45ae4d1d3d4b5ef8b1c752978000ba648e8c6841f