Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 02:57
Behavioral task
behavioral1
Sample
e90e35efc6a377d0f5f900adf4032d38_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e90e35efc6a377d0f5f900adf4032d38_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
e90e35efc6a377d0f5f900adf4032d38_JaffaCakes118.pdf
-
Size
73KB
-
MD5
e90e35efc6a377d0f5f900adf4032d38
-
SHA1
0d30592452f9b72a12930b9033b160d78824eb0c
-
SHA256
fee01ea3b7c9013334f30287de3c14133f3ef1867bd1df789c1782cd7b64bb79
-
SHA512
b24c492ec6d24812e3e10779c847893562b007a09577a67aebcbb5899d9150c3f953f7f7384404617397165d6b9c7cc1f25f5b3e64764a2aa07b3d3eed63281b
-
SSDEEP
1536:UA7RYlcdvKmEMBDEZtJs0U/aR7fSFb3E5NQgf2BmHAyEVsF:dCCRzDknVRD+E5NQyImSk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e90e35efc6a377d0f5f900adf4032d38_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1692
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53cff6b9bdcc25a5de3b9552c2e5658ae
SHA1e38c5f2bc0b91dac4e6061cbbf14a38dd236fd30
SHA256303b30f64f34995c6dbf7f3e29679a9bfcb3448a9b00b0a831abd333dabd0451
SHA51246201d89d65ce1f84d7cab173fb092d847c0ebab478318453de0c150fc404befa27821cb6b0283f0fd56aca79d9a5bdc8ef568c4ad65362cbdd8f9a2b55eb1d5