Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 15:27
Behavioral task
behavioral1
Sample
d78b9888dd25fe7191cbf154baab2cd4_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d78b9888dd25fe7191cbf154baab2cd4_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d78b9888dd25fe7191cbf154baab2cd4_JaffaCakes118.pdf
-
Size
94KB
-
MD5
d78b9888dd25fe7191cbf154baab2cd4
-
SHA1
11be325225cfc8b8ea1bd1c0c4f85447af54caae
-
SHA256
c4d2c1211a42ac2b660912b9c39e1cefde630dd4b4727ce61815d0e3c89a25ba
-
SHA512
bd3f8ae556f8a9c3b9d7327d080e3e582ce60e5fd9a3b07ea1a5856ac540f2672e19c24dd006f77ecb34033187d20be8daaba3e4c0618e0866a205d7fb45c7c8
-
SSDEEP
1536:kxa3D4QEMLRCgko8zuWXZ6Q4f2U+wZ7SW7/zU/8WApO6DTWGsZpgddHxig46IZ:D3xEPPM6URf2Ux7d/OL6D7Apgxz4F
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2084 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2084 AcroRd32.exe 2084 AcroRd32.exe 2084 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d78b9888dd25fe7191cbf154baab2cd4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2084
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD519e18a76c1873b68628658115bcfe45a
SHA1573a9273ec472e1f7113d87ae9b29e3e2ee7f6f3
SHA256b662d0a2e0f2b4e6ddc5957e3197981aaca1d261be9c80a54d98883cd77a1085
SHA5128e913be54c621979b9fadc1e0fb48876e0493ec4d5ab37bb4909be4c4f2917b09aa301dffea37738fb5c71e75460cf0d0d20a845b18699d1fc8587238f78b39f