Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 09:55
Behavioral task
behavioral1
Sample
671abd93d1496f21623e0868b70f0945_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
671abd93d1496f21623e0868b70f0945_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
671abd93d1496f21623e0868b70f0945_JaffaCakes118.pdf
-
Size
16KB
-
MD5
671abd93d1496f21623e0868b70f0945
-
SHA1
130e50fa2f9671c2669a6a6a1097edae14435089
-
SHA256
1b2eb31d929aa139ed0fd378567a367f6a5167d440e1b4c67f3e6ee1d95c4e58
-
SHA512
5bdc1ea11b21a048f85ffbd3b4be72e61db96360e9fa9afe6f9a4ea5df89e6bf7a9e473356c13ae70728f964ba982d3e1010042f4667c9d3bd57eebc0387c749
-
SSDEEP
96:bON06mxdw+7/J5pFsWCv+SadxaO8lvCX1+Rm5PpKGNfG0LuTfxM2+Cr306CX1kim:bONbedw+DJ5pFsm9YPsBvaWTU9rNnQu3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1676 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\671abd93d1496f21623e0868b70f0945_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1676
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD515f0fb1f9f19eb2587d726fa6c9ca247
SHA1c1ee428f3fc356366b30bda65ba6c072604dff09
SHA256b469d468dd7d1a431887ad65d0a3c9727a48ea5637cdc4647dbb7e944e4590d3
SHA512afee9369e09d70567c401ce699a7d73304aff9b268f53e574db4ef8d48828df65827cd043a5b93bb70d72c5b9e93de35b8ecef25b17fcc1295352628627a7612