Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-04-2024 01:25
Behavioral task
behavioral1
Sample
e8e54eb1d70ec3588e8589cbbbc62156_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8e54eb1d70ec3588e8589cbbbc62156_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e8e54eb1d70ec3588e8589cbbbc62156_JaffaCakes118.pdf
-
Size
85KB
-
MD5
e8e54eb1d70ec3588e8589cbbbc62156
-
SHA1
5e13cbc2068e65081bed1648f23076d7a8955959
-
SHA256
c9519def706b536e627f3b9b90745949f6906005c63677a5b2519ab77f433565
-
SHA512
e3b9a2778be601444acc39c2610cc87252cbcab95d8d0880d5c211f10bc2ff65a65f6f3c59ff02334481f9723556173b52fb6ca741e56505f9398063a2c0caa2
-
SSDEEP
1536:OJpsgBvGoJaVESF2kFhAU6DCTPv9OynrsI7DLamiTVZ2xEan6WYpO2+WKne0SmTl:OnsgvG2GDUeTH977fFOijnx2o3X5+d7S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8e54eb1d70ec3588e8589cbbbc62156_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51850e48a87b6c02d28a0e408736fa6ff
SHA167d0635ccbce86ea6b88b9c86a6cae750843892d
SHA25626992f13e5aa630fa15d5c50806a16d2b1f32738b5214e1bcec11d19f91e650d
SHA512512be54fe74d33ff2ad817082a733a28755b30d0b0022d37d8cdc082de3bd3dd905666f52a4f415760334f5cea6f1f14d9fde4cb941cedb0484a57c466ae63ec