Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
06-04-2024 13:51
Behavioral task
behavioral1
Sample
e2ae30445fa37a5e4defc22b02665aa6_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e2ae30445fa37a5e4defc22b02665aa6_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e2ae30445fa37a5e4defc22b02665aa6_JaffaCakes118.pdf
-
Size
87KB
-
MD5
e2ae30445fa37a5e4defc22b02665aa6
-
SHA1
d34b21e20675f6f46ed5e85c5af247567fa3ce11
-
SHA256
220714cd454660b4d297766bed9e1c88b4b10eb9668892d63f2ff25f8ad65f95
-
SHA512
a67fa30f636c169a2da8fd42e6749d92c4eb9f7e4f69424eda2da60bf1ffdf4c94ba00d88758802d120571c176fd0e39ce1733c6eeca1c080c769fb3aba90bc4
-
SSDEEP
1536:xqqWidzRLfwGE8Le9QIQ0UZMRc0qa5RYDU0Oox0OwcDmYyWA/5WGpOKCWzTxqYFF:UwdzRLf+8KSIQRqRHqa5qDaobw2mYi/N
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2360 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2360 AcroRd32.exe 2360 AcroRd32.exe 2360 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2ae30445fa37a5e4defc22b02665aa6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a8025b1e640b47667fbbbc2e93002bc9
SHA1ea9eb2f39d33871e8ff12b6b8e15781f96b440ec
SHA256bfd98dcc1c30dbf15defc52cdbfded1d66dd7a7be6a7b3ff8323b51c56619a3e
SHA512201f6d79e9a0f7e34f0b05d45c280251e28a4b1e64e95b00fa0a76604700add8db79f66c1adac5a79e3f7e9d4572f1ddde332017c69471d503409bc0f9cacaa4