Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 16:48
Behavioral task
behavioral1
Sample
ea74545d5301e626a10a2c281e5afcf6_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea74545d5301e626a10a2c281e5afcf6_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ea74545d5301e626a10a2c281e5afcf6_JaffaCakes118.pdf
-
Size
84KB
-
MD5
ea74545d5301e626a10a2c281e5afcf6
-
SHA1
65a40b9a9363474640f46dbe7353f5c84ec4d52d
-
SHA256
ca4f7463eff01e7ae353bd7aa16644884c2ade97bce44da8663dcd3c40b5ab25
-
SHA512
8bb863b7e3fc68b3527e300b33df1271fa4e50fcb1855ee70441f71d8b261cc36310c49e39716175a2273c88a3df412a65db5dbd3ec9c2b315041e0bcaa52056
-
SSDEEP
1536:AN9HO4VeyzzY006sWq3TpJdVRUjpJ2jiWHtZhya2CW1QaQLob6cgpBOrWUpO7bVd:yJODezY006ZoVRUpJ2jiWHtZh32spLoI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ea74545d5301e626a10a2c281e5afcf6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f9a16c3c027194bdc6752b34379cf557
SHA1c8e45a391c324345b5c15336f11b9a2f31d552a2
SHA2561dff44be2fde5e1ca025248fc140f3feefc27061f23ebac030f80b2fecbd89e4
SHA512a4c07d61dc9bbfa43f35beede0738ea89e29bc8dc0e87f8f86b43f5216f172621ef306d4a4bfa7efabc6f1412d404c347061b7127b460a654c58a880bced64cf