Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 13:54
Behavioral task
behavioral1
Sample
e2af7ae638cabad85cbbb48a42ad02c2_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e2af7ae638cabad85cbbb48a42ad02c2_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e2af7ae638cabad85cbbb48a42ad02c2_JaffaCakes118.pdf
-
Size
36KB
-
MD5
e2af7ae638cabad85cbbb48a42ad02c2
-
SHA1
66704e29963a4cdcf037f20228f43bb26a7b750c
-
SHA256
a53144618411c0a59f9c5fa4cc3e6b03845619eae4e0dacd3e6aaa7a0fcbfdac
-
SHA512
d000d7851adfcfc2929f522b6d5bdbbf77f8b5868dca085df7723c59ec7fc8533e28751f65ac7393a5d6bc7ae7a26a51f57f37ac5ed2236fd00e9e81ec365c49
-
SSDEEP
768:Z6m+ZZ78q/Y9axKunwGIQUp+9a2qNlXyCC:UDCUxKuwGIQU89a2qviCC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2af7ae638cabad85cbbb48a42ad02c2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2884
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5115b0cf5969a57ff493aa6b0d3377fb0
SHA11452f9aba28c8b48b0d2b2d8ef4574d15b22c0d5
SHA2563cfa4f0ca35ea73c6c4063437614dd78f2177630dbd81a4b6ce39cd915ffff28
SHA5122a63dc2aa3805594080e8fa4048af93b75f3ab301ada1b858bcd89221202c9c5e17f8f603210cc8ddc39decd444954ab60079dfd817528ccbe2e66995e567204