Analysis
-
max time kernel
94s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 14:24
Behavioral task
behavioral1
Sample
5c50e2997fa53c8d2030b7c7abb773ea_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c50e2997fa53c8d2030b7c7abb773ea_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5c50e2997fa53c8d2030b7c7abb773ea_JaffaCakes118.pdf
-
Size
35KB
-
MD5
5c50e2997fa53c8d2030b7c7abb773ea
-
SHA1
317f684b773deecf528843482d00eab62cf62425
-
SHA256
bfd9c2c087212fd6cf1d14e079f5a75c5b3d099ffd70bfa793e817e00100b6cb
-
SHA512
4c176049504ee5e07ca5ea4b967930a5751bf200b932f328eff18f8c17c12b3ddac6f817d71249148c494fa210d75257b6a9773672a61905337edad940b3e122
-
SSDEEP
768:XAH7CTDvWgazqwd8bWlarOlkSvVTDIxo+vfVw1GkkR46ZETR:wH7CTNv6j+SvVDwY1kR4tR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2116 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2116 AcroRd32.exe 2116 AcroRd32.exe 2116 AcroRd32.exe 2116 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c50e2997fa53c8d2030b7c7abb773ea_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2116
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5573465dfd99d418f48801ca9464c484a
SHA1a4d93518edbbda6a9d17dae394d8482e9fcb173e
SHA256f80dcb33874085a04e791887a7437be0dfe5fc1613780d428b80a53159de8b62
SHA51217646cfbafbbf912aa6883f3dd5db430302ea426d45864742d7a9fb194496bc6daa714ef3142d9bc937258292547b7eea0b2a00c947136670937b594fec6e077