Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 16:14
Behavioral task
behavioral1
Sample
bcc5ba528dac8c27aa354765b9f40b6a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcc5ba528dac8c27aa354765b9f40b6a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
bcc5ba528dac8c27aa354765b9f40b6a_JaffaCakes118.pdf
-
Size
72KB
-
MD5
bcc5ba528dac8c27aa354765b9f40b6a
-
SHA1
77e46953338c2a0ef53adc144b966fec69574b4b
-
SHA256
94978f539657b98ad155c6079e645014ed8a25a761cb1555d89ca75ab92361fa
-
SHA512
4e1f5d618028a61c2b8ab2acde86e7176f2bdf5fbbf2a6a1c1670730f46a816481a8f50a1bd56fe9c3071da4882a1fd54c0691b6ebd75d4dfd09ee566bb4e628
-
SSDEEP
1536:GWyuiMEIz66rY4C3iQd8xHv4KmW/TuWapOtQHWZybhpMuneXViP5YVe:/yhhINE4HvAW/TztQ1iWeF+v
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2760 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2760 AcroRd32.exe 2760 AcroRd32.exe 2760 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bcc5ba528dac8c27aa354765b9f40b6a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2760
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f8ceeb08cd3aee08cb14cd8d051809fd
SHA1198ca2fb13bbb98232dc7fcb22aa5c0c631f7dc8
SHA2567b82510ccd04e678c7b1dafc2a272edf8f14f1fee8761d85f084079d7ddc9f02
SHA512836ee0deb1231fa9de0982ff085068445b8dfaae827bcc3855ef986eed57fdcf5f6e82a2d742c03d50132a19a839e573b8c16849822a3ad12eb860f24794b643