Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 08:23
Behavioral task
behavioral1
Sample
eaa51832e80feaf412cd40fb2f1e99b7_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eaa51832e80feaf412cd40fb2f1e99b7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eaa51832e80feaf412cd40fb2f1e99b7_JaffaCakes118.pdf
-
Size
529KB
-
MD5
eaa51832e80feaf412cd40fb2f1e99b7
-
SHA1
e8624833c4f1ef4c8d4c1d48f4603443a08d661a
-
SHA256
2abd105163ccf90f1b63f5c389d2b31d0127f813e1dc318ceace3c6dc0f8c2f2
-
SHA512
854f3fd50a55b73d5f4528c5c42626c352ca688d948cf246ad5970dd3c5be3ffeb3204c7b2e127686cdc6a703145456e3b702b1089e2a53fb606c4c305310b76
-
SSDEEP
12288:vNxq+FxUq1Q+DaNgjNzyvU0Q+kQ3WfRZePtELiT:vnq+x1Ja8+v2pZ2tX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2152 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2152 AcroRd32.exe 2152 AcroRd32.exe 2152 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eaa51832e80feaf412cd40fb2f1e99b7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2152
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e955c50655a63b572939c4abf6251a28
SHA1834440bd4db831e431c2ed4f5c28c240db06d111
SHA2562a0b23b64bc174804a3f92c7da73da4edbce36f3fa15640c968b614a9dbdb437
SHA51299694cf4f66d7d3c24607ade74a859865f682a609b6220d67a2e8e27972f112e2bf47b1cf32c80e708dabc28a2c7ba265d731f2e5f1cabfebdc941fcb05ebf1b