Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 07:16
Behavioral task
behavioral1
Sample
e970ef711b25354f88fd4c8bfe1e5128_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e970ef711b25354f88fd4c8bfe1e5128_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e970ef711b25354f88fd4c8bfe1e5128_JaffaCakes118.pdf
-
Size
87KB
-
MD5
e970ef711b25354f88fd4c8bfe1e5128
-
SHA1
62e83d48ed0d00c99f2316041681f1a68a103fb4
-
SHA256
803990cd6003c7d7c1af5b278c02ad4125aca841077add825fc674ff1b11aa88
-
SHA512
bc6e28b7355dc1cbfa501e6bd667e608622ddb2f850945845101a03d944ab86823dc60766e9e756c3655a9b448ca0aa4ecbd8f4d040c3dcc5eb8fa87ba9a7063
-
SSDEEP
1536:2dqUuu/CRg3tuqODVMa7mPEH6hn0Ipew2xXzd9wD5kzbTinmWv3gQpTWOpOwri7E:i2ACRIERscah0IMwyR9wlATinvwwriKh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 844 AcroRd32.exe 844 AcroRd32.exe 844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e970ef711b25354f88fd4c8bfe1e5128_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e6ba92cc3762199eb53664ef358a6346
SHA1081539ef443e7e62449a4bcfb76b880e0b6fc9ae
SHA256b394afc5b40e93bec9f60d64865f15cf0f2568518d4dadd22c08d619c2bae9d5
SHA512186a8319ed65e912ea6ad09e6587fd6c463dea5ba76b3d9c06afe1c01ecda9c62236870418113acff3795a187957aeb6dea0115f8e93cf1da43f7b9a3e0fe8ad