Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 17:20
Behavioral task
behavioral1
Sample
5ce9453b3652dd384331b850c83ae257_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ce9453b3652dd384331b850c83ae257_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5ce9453b3652dd384331b850c83ae257_JaffaCakes118.pdf
-
Size
74KB
-
MD5
5ce9453b3652dd384331b850c83ae257
-
SHA1
54bee0cf68ef0fbbb76a64670d49fb9d932d3dff
-
SHA256
d5127b90f4ef154f2863d8b3812cb967cb1c8a06e34d068eb02c68d1c9d0a181
-
SHA512
3b449d4d2be79ea08ab3be3fea8b5ede0f5ab1ed192f5c24299283e339cda0dfe96ca1783298449f4bac57151d2be4e96e1154fcce9ef0902d3f9b1def8c0bf9
-
SSDEEP
1536:QA5obzIaCNgewmCJmHaAVctZJ3XISfD9W8pOGq0c2oCIWeIgLg2u3:2nJ32adt/nnD4GT7fIL8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2676 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2676 AcroRd32.exe 2676 AcroRd32.exe 2676 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5ce9453b3652dd384331b850c83ae257_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2676
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD513bcbfcb9f938af7fe1603f58ae01711
SHA1264a41e689644eb31a94bc88a29ced4050b87f7f
SHA2566a2bf811a6c33acad249287e6748f10b20e70cdd794471f0f0996045f20a1512
SHA512ed9f7fd67fea85cd4f6c88f9c716b204f94b13181ddcf490e6874f07d354ea31d9753a2083034a8c460cc451cca79206466db0c8839af2943c393a2c35cfa8af