Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 12:34
Behavioral task
behavioral1
Sample
05b9ac27ca57530367a00fe2f45b6ae2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05b9ac27ca57530367a00fe2f45b6ae2_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
05b9ac27ca57530367a00fe2f45b6ae2_JaffaCakes118.pdf
-
Size
82KB
-
MD5
05b9ac27ca57530367a00fe2f45b6ae2
-
SHA1
4ddf9728a2a1af2ffdf2bf97a6f5a1817588c89f
-
SHA256
c07b3cf3a391a60b7aec696e3209e936c16872e8de77995cde5a7200b258063d
-
SHA512
e86033e7eca278e952f1242919e6d29924530cf5a2ad1769902f6d269817d414e81a0ff986609c97492a0ced212e3e4f32b0a5939a5d0e3ee8c3631954443d63
-
SSDEEP
1536:g7jfkPnywUuLmGRYR6GEHHvEbLzhCcaAKr68KOW9AsPgBuJEWxApOGYmw9:0YPn/LJCIG+mLzhWpFKPnJF3GY3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2196 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2196 AcroRd32.exe 2196 AcroRd32.exe 2196 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05b9ac27ca57530367a00fe2f45b6ae2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fba2bac7abf44d14239c609a09b0e6b8
SHA16456fcf52193d9d05972aff407ebf83131a73ccb
SHA2564fd973a6652a10a0a6045a9d3e4cec745a9322005de89d6563cd7768c028286b
SHA512c216e445756be8d04ceea3e7d337680fcf7ab9fb18b8c59330da7ded683d4047dac03145b2b99be387913b0f12924f3c47c5c3ce0294214e0f11d6122915cee2