Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 19:44
Behavioral task
behavioral1
Sample
e842c8c3fd1839de04df62e5acc7706a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e842c8c3fd1839de04df62e5acc7706a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e842c8c3fd1839de04df62e5acc7706a_JaffaCakes118.pdf
-
Size
85KB
-
MD5
e842c8c3fd1839de04df62e5acc7706a
-
SHA1
766efecb39cb949401e1319befc827d89c4de53f
-
SHA256
beda5ee15735bd614abf8cb7c7b96c1d957dea2add0b9c5cdf457d3a2751a43d
-
SHA512
acf068de6a7618802bbb4ed54d0be32ff9b35e8bcb5e6bcae0ef5765cb731f11ae71a02e3e013faacb89ce695530794ce3f03d948fd7271de9fe96ed77136472
-
SSDEEP
1536:GXgvyS0EpGKSBPvzU15w7zoDHGtcW7Ach69J08KuEJeOkq5Ab3z6IWp4kb71dpWo:H6YGKkzcqtti59S8yZVATz6zb71dgSz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1612 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1612 AcroRd32.exe 1612 AcroRd32.exe 1612 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e842c8c3fd1839de04df62e5acc7706a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1612
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55ea37eab7d8eb53236eecc0cb2dcccd1
SHA17eaebbced64a0b4dfd1a7818a5d9c2d14fddaf6b
SHA256ddc6c2e1ddc9b431a9c542d80f2158fba11daa3b605324219ee5db89d720fc65
SHA512d405646770fb900c1e0a97fd68df8a3d834e75c079915b232419255a00acd60acc6ae9c2b39b975e7b71a2ffa0fba576ef9d8793f339ee780454ab3c9c7c883f