Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 14:56
Behavioral task
behavioral1
Sample
d6e8482c096d0d3c94cf2a0f3c7532c0_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d6e8482c096d0d3c94cf2a0f3c7532c0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d6e8482c096d0d3c94cf2a0f3c7532c0_JaffaCakes118.pdf
-
Size
135KB
-
MD5
d6e8482c096d0d3c94cf2a0f3c7532c0
-
SHA1
949d57ae024a98c698f03549e56c1460d90c94d0
-
SHA256
e6f5f9d6989ed229591271d316d81695ec43755dfb85d27bd8289997729cf021
-
SHA512
bb4df5449dd2dbf954d54c555654776aa5e377e4a7c7d03e7f86e4031c7e0a710c0a1dbe01781ea26bdce3db7172461ccca10d98eb3d412599d1aff4d73e5a4d
-
SSDEEP
3072:kUerpSxAQIh3hwFb+ZIshaPzwArdYXbtN4jO9C59wPsy3HoP4:8rpS2RLiqZ3IriCOXZHoQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2268 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2268 AcroRd32.exe 2268 AcroRd32.exe 2268 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d6e8482c096d0d3c94cf2a0f3c7532c0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2268
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5115c53198772be7e71390cf52c539047
SHA10b8a2c16d310c05357234efd0f164466ff3d1145
SHA25691d55253ef1a22b00208ef2f8bdd5aeab4e0d50f44ab31256dbac60f7711432e
SHA512b9564e874fc8e01ae766d812302392894c75ec907e34026f74de501e9d3cb29852cea62bbb5220829fb20cc5f807cc66031a657f5054a8063c6b700e959129b5