Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-04-2024 02:28
Behavioral task
behavioral1
Sample
e90124a294631cf4a260dadf1ebcdb6d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e90124a294631cf4a260dadf1ebcdb6d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e90124a294631cf4a260dadf1ebcdb6d_JaffaCakes118.pdf
-
Size
71KB
-
MD5
e90124a294631cf4a260dadf1ebcdb6d
-
SHA1
7664b94f42d5c32d56533581b06b76603e0473fe
-
SHA256
8cecf8c6d24238b6721110416b896c1ba292af0afe889623b5b643ce2477b1f1
-
SHA512
17f9194bc8f5cd0741cd4547b3b2e62cc74baba03f7005d9bdbddb71e826026a2fbb1dd4f6e3fe0396934f347a41128c70311e478b968f0fe65449ae9dfa5444
-
SSDEEP
1536:iz7lO/LaFr1whEeySwYQxL65VpQi/9VMOSsx8iWkNpOPaWcJhiC0fUR74FqMWrZ:oxYOd1Sw3k1Zxx8HPeTi5fURcAM2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1368 AcroRd32.exe 1368 AcroRd32.exe 1368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e90124a294631cf4a260dadf1ebcdb6d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ebc92fd486b2908dd61457f2ceb97b91
SHA1fbaa8f9b5d91e92d1fa6ca816454bac8b488a326
SHA256174d47d4fa5f2ab4d37c0a5e4a0cf2ef59ead0fc13b2895d442373ba5ca667ff
SHA5125d0dfadd51426dff9d2ad21f9de2e64ae2ceb055dee7691a3e500ce61a2eccbd74b5f1e922d8aee53a9ce621589b0f35762d3807b868ca9a54448c83cfbfaf34