Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 14:25
Behavioral task
behavioral1
Sample
5c51b3fa934096a5f45fd402fd8044ed_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c51b3fa934096a5f45fd402fd8044ed_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5c51b3fa934096a5f45fd402fd8044ed_JaffaCakes118.pdf
-
Size
84KB
-
MD5
5c51b3fa934096a5f45fd402fd8044ed
-
SHA1
3f35ce4c2b2f9d8e0f761cfd705e0bdcfac10313
-
SHA256
f6c56722e1450f5d340c70574e26fd708e14037dc0b5128029ac33ea9ea70e8a
-
SHA512
696da8fdaa6579d98a3cadcd9d199862fbec71ec5a57ddd0a53d5ecd6a369e13de4287798678692d0f0aa2c1c531afd72cfdfe25bdbcc099400c99f64f6680e2
-
SSDEEP
1536:UBvMTj4yHNaxX9XzU9nDSWuD6iIJPys0Sh3P+2+WOpOwrCkUDLYXuW0nD+gC4LOh:qMjHMrzo2FmrKgh3JwrCkMLw6nymLOh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2544 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2544 AcroRd32.exe 2544 AcroRd32.exe 2544 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c51b3fa934096a5f45fd402fd8044ed_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2544
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5814faa8c8a9c870eb64a065d5634acb1
SHA114bf4ee61e58b76ef335a21377818df8319f1787
SHA256d23a30949177bcf04c6deb318bc322cede603663c536e008157075cb36cf1af8
SHA51235a86a74407e70c1efeeb9b169ee1ad1598981cf20380300e1850deaa8a56d9dfe342862ed47b2972d9a567ab0755faab80be8ce56dc02ff9e9254f28dc151da