Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 04:32
Behavioral task
behavioral1
Sample
caeb993987c5790be49ef6e3c4f257a9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caeb993987c5790be49ef6e3c4f257a9_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
caeb993987c5790be49ef6e3c4f257a9_JaffaCakes118.pdf
-
Size
81KB
-
MD5
caeb993987c5790be49ef6e3c4f257a9
-
SHA1
fcbe7532068b114ee19da3fb966bdd906141c8bd
-
SHA256
8e1f2888bace4570f798d37e1f2fe2c037d7607a31287aeb03c7508c20f5c0ab
-
SHA512
892f6a8773a59bfc28f52335d564ceb7d4401a81ee3fc802a150714616244c928c9f7ab5d48de555761c3e63788d17e365b3122976d8d2d6121cce699b39cb87
-
SSDEEP
1536:95W0J2+zLcSC/dw/kS1yEPM/WYXmDzy7oBK4ekzvZWbpONiWm+TSpqdYnvcDLe:m08+XRYTS1t0OYXm3sGZvbNVUn0+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\caeb993987c5790be49ef6e3c4f257a9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5591576058e39c62cff01f3937967699a
SHA11da6e665eb9233c17cd947e3ee45b7388b0b8064
SHA2569479171d89596f8f56e296950af207c3d038f029e5a0425b0d261ff8b3ebe62b
SHA512c14e2d997e4f2d1b0fe748e0725d31cd0593b4fe2ed967b909ec25b5363802d8c8caecbd4964a55cd3954b7bd19032db98e8e964ab171c49c4cff71298e7348c