Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 00:23
Behavioral task
behavioral1
Sample
c5cdc84f8fa9401b73eff065413be8b9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5cdc84f8fa9401b73eff065413be8b9_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c5cdc84f8fa9401b73eff065413be8b9_JaffaCakes118.pdf
-
Size
79KB
-
MD5
c5cdc84f8fa9401b73eff065413be8b9
-
SHA1
a6cbea2bb752904ea7126e5d0ec0c582390764ad
-
SHA256
5a4a9c55d90c9fd0c5f5c5bdeab7180ef1a095ab6a8b641b094adbc8033469b9
-
SHA512
327ed01f58b6b90060d6fef8a9998cc790237a16b1313b99b62e76d9827e6d26c788dec50447888a3b3b4024089c205d2b041e8c05c29d2b2a81a1cbe97af707
-
SSDEEP
1536:DBtG00npOVKQanA66rqWlvFe+x6rqjWm58ywKdWLWxApOGLlYGYT7G:VtG00nWMnqqs8QkGwiWU3GLlQW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2148 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2148 AcroRd32.exe 2148 AcroRd32.exe 2148 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c5cdc84f8fa9401b73eff065413be8b9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2148
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53469f2456e7927d3c1c90e57bab58224
SHA103e4d4a08963d5dfb573673a97f16f8fcc564cdd
SHA2562ac7e6d9001d6d037024f749769df459bcbf3d18d3949a4b15cdfdbb4c7ed3ed
SHA512d9cf619b45b0b7ad863cb1905de7accc907deae99d6453a720a84144c0a4a02812d548a37fb161079ef008b13c36ad3219ecb21986c34e52f8e84bd43c14b48a