Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
21-07-2024 22:39
Behavioral task
behavioral1
Sample
61b1ac314bf23e8c8984213d7864d62c_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61b1ac314bf23e8c8984213d7864d62c_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
61b1ac314bf23e8c8984213d7864d62c_JaffaCakes118.pdf
-
Size
78KB
-
MD5
61b1ac314bf23e8c8984213d7864d62c
-
SHA1
ea304715de59e4cf8806c30eba52b14055f1780d
-
SHA256
108b48646dfaaecc5a1cb5c785821b73feeaf00b5f858cea1c392a56042c64db
-
SHA512
8d42b94bf5ff8817f4292b915029bc8922e06e2edee6ec3db42801a3fecdb2651adb1a4139d665923fafe3b953becc06ae0869b9dceada3d2c22049d8094dbe1
-
SSDEEP
1536:e8rHZwToYm6hmJxiYMbmPdU3ckwdRlWApO6eWqUvtYMh9zWnE7q2VEXRxwcouS:NDgVmJ8YMaVUidR86kkteq/qR2coP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1732 AcroRd32.exe 1732 AcroRd32.exe 1732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61b1ac314bf23e8c8984213d7864d62c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55cebe1a0b668f004dd7e167004e13ff7
SHA10bceaa1e40b0b04f41542eeab87e1acc34161953
SHA2569e480eee2602fbec3981414acb2fb52514b5fe29071d8daff2bf803b5b385b50
SHA5122da84418ec97fb5bc7dca3692fb1b93fc38379c896fe8c430f555a0a9028fccde89cc3e11eb094b4c4634f41a79af53018deabe9a67174fd6ce148222352559b