Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
21/07/2024, 20:18
Behavioral task
behavioral1
Sample
614039dfe41303eb415c18dee07739ad_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
614039dfe41303eb415c18dee07739ad_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
614039dfe41303eb415c18dee07739ad_JaffaCakes118.pdf
-
Size
75KB
-
MD5
614039dfe41303eb415c18dee07739ad
-
SHA1
0ef9a064e7ff048dfdf6386ebd9596b3403b5333
-
SHA256
d06da624193fe8749aba4ac652670310c911522427f1114f8d7251eb41f4e9f4
-
SHA512
0ac4cf737634c3055ad019de2d6eda06e76294b2044fd224e6860d4604ce63b917dd52dd95ca113497435e88d60d2622ab453c8d7a2796732ce9364f457ea66b
-
SSDEEP
1536:woMET/SFaZUZkJuV9mndZehBW9NYSZLfH29xKDvUx2U0JrHpfSVr/agWb2:83iuQd4BWXdlmGvUxnOL1SN/7T
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2120 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2120 AcroRd32.exe 2120 AcroRd32.exe 2120 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\614039dfe41303eb415c18dee07739ad_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2120
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ee2f81bbac28944a60a03c56d265a7cb
SHA1f07ebeece58a1bdd2e01cc0493e8ab434a2cd18a
SHA256e79f47147d48f41c3861556a72baa8f296bcc536b496d5f9d0fc45599ca1b1f2
SHA51282b659a017314331ee15ca006889a56b50b9fdc379f29798f9faf797efcc6a514c1fb51bcf19b4db6d738139b884eaa3b7418038469e60608f70ebe2e04f45a2