Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 03:13
Behavioral task
behavioral1
Sample
c93b393c4cbbe0b14445b1e8659ef4ef_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c93b393c4cbbe0b14445b1e8659ef4ef_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c93b393c4cbbe0b14445b1e8659ef4ef_JaffaCakes118.pdf
-
Size
34KB
-
MD5
c93b393c4cbbe0b14445b1e8659ef4ef
-
SHA1
fb66aa65e8c7fc89ab18340e159e4ff1b0e54adb
-
SHA256
ec9ade0a00ee6fba7ac030f44569c03dd17316ba42a4dcdc94adc6694d09a0b3
-
SHA512
521b3e8cd351fcc071c42b38ec2f6dfa8287227e107ac38ef91257c9014dba896d606ec57d8602bef218fc115d0e3c15ae09f7808cd03aee0508ae455066be79
-
SSDEEP
768:fOiJmaEeMhV2PIkrt3pgE5OlJIcEXK8yt4puzt4WKr4tszou1DQIk5:fOiJmaXMhV2PIkrt3pgE5Oz81puBArCN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1660 AcroRd32.exe 1660 AcroRd32.exe 1660 AcroRd32.exe 1660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c93b393c4cbbe0b14445b1e8659ef4ef_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55c61ad6ae11f263f49714021a301ace6
SHA1bc138ff0a70f481a5f940b4ae30eeb2e7d677132
SHA256a68b24ffb3e7a5cfae17a9eef125685a8229d0a7311f7e5f43b3ed2688a9a866
SHA5126bb53017a7e6987703a7336659c0c69c68de4bebf8cd556d46fc34203dd9617967b09b87abbe9536ed47f264e8c5dae4babda691c6aeda52fac92d5ce3ba014f