Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 08:40
Behavioral task
behavioral1
Sample
ced52f5bf9b690c359e4239609137bf7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ced52f5bf9b690c359e4239609137bf7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ced52f5bf9b690c359e4239609137bf7_JaffaCakes118.pdf
-
Size
75KB
-
MD5
ced52f5bf9b690c359e4239609137bf7
-
SHA1
c0740ac72bd2101975e3247c940c90bdafabc084
-
SHA256
cbe581da0e924df254132d577a30e5b22c4cefb02d54d21d5fd242f7db8f4f83
-
SHA512
33399f3cae40950503a9c0cb8ac4e7192f5eb51f43479965cacf540b1b5a0ba3351a78f63e5f2480dd5b1970e6a9c9a4a1dab70e3b920c6345c966a979219c16
-
SSDEEP
1536:wQ0F8A4wUxmjLg8q1yO+JeWapOtQHWtSZO+rdug:OHvUwvg3KjtQGgO+Qg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3024 AcroRd32.exe 3024 AcroRd32.exe 3024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ced52f5bf9b690c359e4239609137bf7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5233c5ec66b4d67ed19c86254a5a0c54c
SHA1bbb63e0335fc7aa72198c405cb9fd3881956b01c
SHA2569d8737e2fd9baaf6c71abb305c39db07a753723332a2bbdf1bf98421baec9adf
SHA51258a0dc7995562c61f7f6cc6acde4cc9329a7115d8c4a9f3981933feec7685578a657841a486c13afdda5dac04f25beac249edb0f01394bd81fd779a65fd78072