Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 04:54
Behavioral task
behavioral1
Sample
dbc01170ff57c65ef252f934ec0d8df8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbc01170ff57c65ef252f934ec0d8df8_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
dbc01170ff57c65ef252f934ec0d8df8_JaffaCakes118.pdf
-
Size
55KB
-
MD5
dbc01170ff57c65ef252f934ec0d8df8
-
SHA1
e367d16b62a4fd447d7048e8fdb3abe8173f9423
-
SHA256
1eb8a377b90fd490b67864c0f2a22464546fe57c8b9f0534f32fa0f3997875cd
-
SHA512
5954976c3700661e7fe5c07f8cff5fb6d5a2a881110747c00f85cfcb558e3e03708d4f05a372f39b42a4084ba865407d12ed6d0d2ee4231313b29d0a678ff213
-
SSDEEP
768:T0f5wyFpSXVDd9yXLbX0DR3wYw3N2ekEUwsl292HO8x6e0esYe6AxWNMtdeCh:T0xsHUbbXdnd2oUY+nL5e6AfdL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2512 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2512 AcroRd32.exe 2512 AcroRd32.exe 2512 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dbc01170ff57c65ef252f934ec0d8df8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2512
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b350a44d8b757b7c3cb4f01b1cb46bf9
SHA1a054d5d15836981962ab5e6f4e52454d4b1e4955
SHA25676c5b9d2bb0e19bd5f9fd92f8048ddb23a9d077d79cf41b5f1a34837b92bddd9
SHA51224c157622172eda67456706f3e0865cd5706ce784226c74b4ba32d99a0b4c419dfa8e8fbe1e89f174455276040762d7d00f4471aee0dd585e101ac7c66cc5c64