Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 16:01
Behavioral task
behavioral1
Sample
e7d9b45d7c9069366bbbdc6b23a62975_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7d9b45d7c9069366bbbdc6b23a62975_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e7d9b45d7c9069366bbbdc6b23a62975_JaffaCakes118.pdf
-
Size
87KB
-
MD5
e7d9b45d7c9069366bbbdc6b23a62975
-
SHA1
745b97bd0ea848880660a34559296cccd91ed64a
-
SHA256
843514c2d83ad322838aa9277fd64cdc65ce82cda16527da46cdabacd2e9c031
-
SHA512
3e10e3c0043400ff75474ffaa8acc3bba82ea0493223b24b565b6c8349095147035249d28950bb8ed6503b9db990a73d1daab9482d58e166dde5d3dae7cb8aaf
-
SSDEEP
1536:IAkNjCvO19QF3Fks4erIvuhKadutFfHWkNpOPaWaoJYrvmm/H4liygV:kf19qas8Whr0tFAPooJSvmmf4w5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1048 AcroRd32.exe 1048 AcroRd32.exe 1048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7d9b45d7c9069366bbbdc6b23a62975_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5feaa78a8df86d8c61a3d1217a2572e9e
SHA18750714a60e31dcc5231fd755ecc900a46af6278
SHA25647a727c9fd26d28c0b92211cfb9258396de07e69c532e96eba3526dd059d3026
SHA512c1661712b4ef55d97dbbcbc6be37f3cc701f3382deb85f11ddb5ecfd58060ec951530854fcf5188be9e14415daf7e5614fa0d717b122a29f776fa1a5f98453ab