Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 16:31
Behavioral task
behavioral1
Sample
e7e7ec1b783027697c93a73714089da5_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e7e7ec1b783027697c93a73714089da5_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e7e7ec1b783027697c93a73714089da5_JaffaCakes118.pdf
-
Size
91KB
-
MD5
e7e7ec1b783027697c93a73714089da5
-
SHA1
c7f3df06b341871757aa2cfcadbf45ffd172587b
-
SHA256
0ef76c1e606ace0210546b297f437b26d21d0e5ee4af30d8f5d5be72da9475c7
-
SHA512
312332ca100b73d16bb6ea564260cde7ec92dac4f23ad38f77b1f509f578ce135a20b4cb1fdf67c7a949a44065c0947372f71c8970677405f43d69ba695730a5
-
SSDEEP
1536:o/ibq2LT+kv67St12aw+sOit/VEgfW9FCw5GJ+tlZWbpON9W4SJW2OCmZ:6ijTPq1fOibNcCpstlbNCJrA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2876 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2876 AcroRd32.exe 2876 AcroRd32.exe 2876 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7e7ec1b783027697c93a73714089da5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD519864817b36590da4189a30dc591fe8a
SHA1bb6bf936689212728590e140a1259d4f33df632c
SHA256c7e8f187477ef34b03572dcc9db2b69d9f0b184d8ec5ee54d828d0ba4c6349c4
SHA5125cf2ce3523af97b81e97744cddd24d64fe1d71f6daf99b035cb80bf0377147594aa694ff73de7a3f25925fb1a45a252aa49abdf983147301703977b61dd0d2a1