Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 16:39
Behavioral task
behavioral1
Sample
e7ec3abaffc6321a1f869ac5f9745ad1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7ec3abaffc6321a1f869ac5f9745ad1_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e7ec3abaffc6321a1f869ac5f9745ad1_JaffaCakes118.pdf
-
Size
84KB
-
MD5
e7ec3abaffc6321a1f869ac5f9745ad1
-
SHA1
2fa5ef8f505e8bc9b2f8243f192fe91ddf94fa76
-
SHA256
4b0787d2427383bc87b6a3840c415e05626af0e85fb5042182e95c4347e164ff
-
SHA512
c743a68410419363d87c35a67f3a237c5b0316a09b8690a1b075157b941e0b3e0b9f45d890cc742f2c9e8c59f823d4b101fbf79e141b694c284b5ec960c40b83
-
SSDEEP
1536:1b0Q5Pg6JpUw2RkDBOWU+hK2GGqU0r1goUe7Wpba+hyxhnucc0iEWUpO7+/c:ZRZ/Uw289HhK2QjvCUxJ39iH7b
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3044 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3044 AcroRd32.exe 3044 AcroRd32.exe 3044 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7ec3abaffc6321a1f869ac5f9745ad1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3044
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57bf8c2c63baedf39c913850f251eb582
SHA1f932bf1ade797e4871f746bdd0114e4bab776763
SHA25681eb10591b5a9ddbde262df62ca9739c0e013d75af6a289c7725694602e31232
SHA512c5f125c32c31a001a22e85a65f26339c67ef283e6bc76df15cd42d80a8f7251ec3fdbfe9652c7b5a6ac9924c2021cf3861ff9279f1e74185bdc55e1b38102169