Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 11:25
Behavioral task
behavioral1
Sample
e9e184f2890eda5359b51b08b8456728_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9e184f2890eda5359b51b08b8456728_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e9e184f2890eda5359b51b08b8456728_JaffaCakes118.pdf
-
Size
34KB
-
MD5
e9e184f2890eda5359b51b08b8456728
-
SHA1
86ac536a29325b79cc2cfeafc1d0a8e4312b0d94
-
SHA256
d919008ab6cb4d2c79d117f5e929ab2285ba156e524fd60fe5c7c9798fb37c59
-
SHA512
06f98142b877a79427f5b78b7341f9b73a2999e9d8a426412e69338b952f1e2164d6e5e59674fd28359dbdbc3f1cba5877c2b43425eabce5a43ce2d320cff1de
-
SSDEEP
768:baXNQ9LxsaVBLSJ5GTLRKwpWblbN6fiB9T7KqFp:bF1FcJ5GTFiZ8fEF2qFp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2848 AcroRd32.exe 2848 AcroRd32.exe 2848 AcroRd32.exe 2848 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9e184f2890eda5359b51b08b8456728_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2848
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e8a47f70fa1ceb02d626af81fa5f0482
SHA1e00a64f2af2ddc9f28b71d69117d9d8b02d89e59
SHA25684a7212763110dad90aa6375f18d22e0f922f110530d1e80b12b0c049c373064
SHA512ee15463f96c47b884eae44745f8b68ca14ed173189f05340d1546c154b4b9c8086c3a455ef6fbbbbed7bcddd607936c121011752b3319189faeb02e48224594b