Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 17:07
Behavioral task
behavioral1
Sample
27c4e9fb01dab1bb2f38cb509f0898fc_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27c4e9fb01dab1bb2f38cb509f0898fc_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
27c4e9fb01dab1bb2f38cb509f0898fc_JaffaCakes118.pdf
-
Size
83KB
-
MD5
27c4e9fb01dab1bb2f38cb509f0898fc
-
SHA1
05ecc9ae305f4c167a5f0093b1eb9ec938255cae
-
SHA256
a797ca101151c885a3744350d62d6aa6be31fed8b0c49b217d8e100a47aecff1
-
SHA512
cdceedf8d1f1fdf4badff9bbf7c8f7f6aedcb9b821b8d9f570331521eca8ed16b15e5d3dcc8a00c801218dd40b9358eda9d03cfcdead565ea3d6363bfccd1b5b
-
SSDEEP
1536:BzG+szWOHI6V1N0F1nk4TPRH3yFlBPWlwkbzUlDoOhRmW9Awp4iNEPeQ38WQpOCx:xGnd61nHPRCQ5bSDoOb7vptI37Cx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1732 AcroRd32.exe 1732 AcroRd32.exe 1732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27c4e9fb01dab1bb2f38cb509f0898fc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b352c53796c060c665760ea34602b0ad
SHA18d83839444d2bdd04a5c17f7648dc7deea22901f
SHA2567c783a440cd0787bc67a0a3a6d4cb54667d3540b1d79f4a4d6252d276a264c44
SHA51237e31907d4f9741d72a9a8e594d0cd5c37ae1bb519efca48e8ec9bde4478760a09336f9cf6284ed4d7e2df0bbb2aef0d77ec71d404daaab54a312fee61cbbf96