Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 01:47
Behavioral task
behavioral1
Sample
e8eee395b6c1d484091b0392d3d37dba_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8eee395b6c1d484091b0392d3d37dba_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e8eee395b6c1d484091b0392d3d37dba_JaffaCakes118.pdf
-
Size
84KB
-
MD5
e8eee395b6c1d484091b0392d3d37dba
-
SHA1
9a9589b96562c1e77a48c9ef8f756d7638f053f2
-
SHA256
def7eda6795944f10b608e2b223786219e9066dce980ced2e4fe1de920a56754
-
SHA512
21b9aef01f637952b85cc75e3f4d2697ef48fe0c878881eb59c5d89eb0b8aad6c34fcd02c0da3f2d66021e413f3674bf86e473a014d3018918d33b57e0ae9e26
-
SSDEEP
1536:2yI6cYj/N9w/0m4xWouf2FxOgZa5p7Ugd2mMW1rUWapOtQxvgGNGiQUw:lXck9whN2FxmymV1tQlR+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8eee395b6c1d484091b0392d3d37dba_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD594ab2f1a05ccde913f18321146eb8331
SHA1ef8a8e2287ba7da467caaaa86113ca7627090e9c
SHA256abde198ca444574ec90428c85e9ca1b9a3ee5445cc4dcd2ea628a2678e65457f
SHA512671fd023586136f3d83fb9d2ef0360ba63df5af1747662e813c09c70816afb62f2c3649515b63e56c0e4a8dd351ba680da19ff67c53335bf9dc044bf0d3c8b3e