Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 08:11
Behavioral task
behavioral1
Sample
ce3e82bb91a636f02fcb4b64c9dec697_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce3e82bb91a636f02fcb4b64c9dec697_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ce3e82bb91a636f02fcb4b64c9dec697_JaffaCakes118.pdf
-
Size
84KB
-
MD5
ce3e82bb91a636f02fcb4b64c9dec697
-
SHA1
d05308e2d4e42cec8595ea4a91dec66fb5b21c7c
-
SHA256
aaf629926de0109370f6922dfb071b5815843a91403553e5d7dcfcea85d5fe21
-
SHA512
b3ceb499a972b1c5b4a86b3881e66c82ee4e3360f9a47ce30618b2d336c315384b0ed6df0a9efbf44ee5d542b5166487168c7aff1ec0da60d43b9914e811b24a
-
SSDEEP
1536:49HgzlwQgv0RW5zjQPwrNfpN1JjEWxDTJOxfi60YzH8bUAWapOnT/6W:0HgG/j5zjowrBpNRDTkxfi60YL8AJnb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2528 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2528 AcroRd32.exe 2528 AcroRd32.exe 2528 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce3e82bb91a636f02fcb4b64c9dec697_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2528
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5232a99cbd31d92558b2b8731f3eaf196
SHA11f4c099da917497489d0c2a8278973ccf9350aaf
SHA256ae844444a6cb7582bc313a5e1f5f848983b5f576c4e8318a56fed6b4992bc012
SHA512226a0e2d4cb9bb5dd0755802668c6a64f85cef0ff4cc9f12f952bc30f40b39718b7103ce8ef0b8504c5ae9a61d2143bb741763b73a15494125b01fa7bc7cb330