Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 10:03
Behavioral task
behavioral1
Sample
e20f521b69051fc88eed4fd77bdba2ef_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e20f521b69051fc88eed4fd77bdba2ef_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e20f521b69051fc88eed4fd77bdba2ef_JaffaCakes118.pdf
-
Size
74KB
-
MD5
e20f521b69051fc88eed4fd77bdba2ef
-
SHA1
78befa135e70a0d5776b24b2f4b45345a6529e03
-
SHA256
c9c72eb401b9db774de4f3001ec3c16b0a469ea9b5584161d8e1bece39f9ce3e
-
SHA512
222fe3ba4653fd95d4309f2aa18eeb6af3ffe4c61281ff3c7da42a444a9cbca40e1484aad28b7299b3d2e1a4fdb994dfd6cd2a07db4005e3876e3a5ac6b35c31
-
SSDEEP
1536:kNISAw86qgFe75t9q9xY5GshVegzZbJeNvDXzWypOlLhw+jWDla3S:jw0SYb9q9C4KVPQLXslLS+g/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2188 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2188 AcroRd32.exe 2188 AcroRd32.exe 2188 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e20f521b69051fc88eed4fd77bdba2ef_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2188
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD538b0592105fbbc962214b0d104a54f81
SHA1f8904d2663ae9c0e65be536cc693c4ae4a660dbb
SHA2566ab6e93007925fde2bb99b2e00ffc34b4745b889f9b4c578a5553249ab87f43d
SHA5126cb022344566442fe6f3ed3baa44d55cfa46186a2bdea682b8214b0fd838550639a298dee58a15798d34ceaaa15d7d5e67e22cd5887623e346eb459bb86be204