Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 02:19
Behavioral task
behavioral1
Sample
c8296ef15ed314f286da3a10bd410c5e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8296ef15ed314f286da3a10bd410c5e_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c8296ef15ed314f286da3a10bd410c5e_JaffaCakes118.pdf
-
Size
84KB
-
MD5
c8296ef15ed314f286da3a10bd410c5e
-
SHA1
dbff3a4b744153dd817eb6eefe9a18ae75a34d53
-
SHA256
6546dac57f5986c6f8ec3c3c43f34ea09cf6eec6e80c67d5e514df0d444b166c
-
SHA512
61f5dd0df6f9fb71fc8dcf29377a9fd2533c7d8edab987596cf5af83f45a5823c9102bd6f93583e04f6a7faced63b7016229915702598997070d52b6994ab76f
-
SSDEEP
1536:YJ00W2V0UFb2APzxpkTuG7BO+DL6o+6xl2a4F8Fxp+idGC4IxYlY1V+RYYQ:LqbLCY+DLBr2sxpeGxyYqR2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2780 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2780 AcroRd32.exe 2780 AcroRd32.exe 2780 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8296ef15ed314f286da3a10bd410c5e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2780
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD502189fe354fafcfc8150200243de4d11
SHA1280da7b9a0fa1badbd1a599f4014a6d0bda9bb9c
SHA256f57932a55eda0674b492017009b667942dfb79a754181b7f1fd264c0cebae870
SHA512de304cb47915d5f78bf91cf31ee7b3eeb70f785fa12c6b3e69372b94faf325d1d805afc0870caf6e101760766118d7d7103fb1ce7c654708fe5a825b783200d9