Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 06:20
Behavioral task
behavioral1
Sample
667477cf209fba58f05d86b06331b4ec_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
667477cf209fba58f05d86b06331b4ec_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
667477cf209fba58f05d86b06331b4ec_JaffaCakes118.pdf
-
Size
8KB
-
MD5
667477cf209fba58f05d86b06331b4ec
-
SHA1
2c4ac9ea11e6c69775599944e909e68bbc4794de
-
SHA256
6d2b857e47669692873868260fa16fb5e047b610e40742bffeb964fa9b929921
-
SHA512
42fd3f2e2d50c09bd2b4fcbc39025f1808b5108ccac85af12fa4464a85d956c0f53cef2c4c6ac8fed2ba6675301a0ced9b32f37b7b08e5c10bfeabd992474571
-
SSDEEP
192:fE30wmJoCQziKgHvhUenbvXjxnx3kMRhU+yCVx+knFYJayC6hS2jw:y4vQzghUebf52iDn6gaayCUS5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2376 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2376 AcroRd32.exe 2376 AcroRd32.exe 2376 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\667477cf209fba58f05d86b06331b4ec_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2376
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54686c9aff2ad905cca4f723d49d5ea32
SHA170ed9fac04ab50b582bf87ce8cc7b69090192575
SHA2563c5fa5019192e7f834d5e5bbe772d3890e9355c571c9390316c5550a9e5de6ff
SHA512674cfdc13d6423b25f43ff30d41b78040adfd1e24b7a2fb8ae775c8abfa84d58a86a325656e66995d4b03cea8a941e633724dce8e05763412390bbe40689ae96