Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 00:16
Behavioral task
behavioral1
Sample
c5aa00c299fcd4713bd5f662eb75bb83_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5aa00c299fcd4713bd5f662eb75bb83_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c5aa00c299fcd4713bd5f662eb75bb83_JaffaCakes118.pdf
-
Size
80KB
-
MD5
c5aa00c299fcd4713bd5f662eb75bb83
-
SHA1
0c6661223cc36648b0c18692a959696a54a9a659
-
SHA256
47f4a38dd75c0abb87e4236819af4ab4f6750c74eeef8b69b270b293d19ad76f
-
SHA512
540aa87a736098797b77f17be18e41dae47047b7400f0892b5cc6153bcdcc09d73e10283ed8bf1ec9ad5e66e9ced326372865dd4dbe36d77adc48e7a3c46c6d4
-
SSDEEP
1536:tqOssNe6Q+7fVF8cxaKCOxv9WHWmwqmoWUpO7ap5ri:rI4zTDbCOxvU/wqmL70M
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2312 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2312 AcroRd32.exe 2312 AcroRd32.exe 2312 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c5aa00c299fcd4713bd5f662eb75bb83_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2312
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57b8bccdc3f6daafedaedfe5e3a4dd56d
SHA1fb92e430c9893f218bf39979e47f8cb2757a2621
SHA2565e4cf44a0904ead04f43ce1857ba44c8e3d4072e37410b74d322334bc30ff824
SHA5123a503b9da7d6ca6a61d6b53c6e412c38170a345ac5c51fcf5d145317bcb91b3d5ce014d176dcfabb386f72fcf744a0cab5e9b543b784bdbe677fac6b721a0ab6