Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 08:31
Behavioral task
behavioral1
Sample
eaa8d5db227ad0f9c1bf21f34f2ea554_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eaa8d5db227ad0f9c1bf21f34f2ea554_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eaa8d5db227ad0f9c1bf21f34f2ea554_JaffaCakes118.pdf
-
Size
34KB
-
MD5
eaa8d5db227ad0f9c1bf21f34f2ea554
-
SHA1
24f25723e5e944ef4cbaf27d74337e63a206ef1f
-
SHA256
866361a1466cc63c151b889a9d353603b5665db3a3c84033eb426534a12dd65f
-
SHA512
970258a1c228107e0d5edf6a33035982fb59585b6c0dbfa8a08959b2c86034941f6c85f750c3957aaf85b66191e6f7ecd39a7ae4052b8b2e76fb87ea2de2eb86
-
SSDEEP
768:XfmBf0Nzm3sRAhkp8N+Wa75vyKi4iDjA+juqDnHf:XfmsNShQ8N+W01ynDjzjuqDnHf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eaa8d5db227ad0f9c1bf21f34f2ea554_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c47ba2e7074e960b75e07c5da86ba06f
SHA192f5a2b65c9a41b82ade71edc9bad15fec4e21a7
SHA2562c55baa282d0736e9d3ff78a6668799466f66c5f836ea1d6875769486672ad4b
SHA51214c0f76afad6ff973ada0e6595afd63beecb15470313ee809df0e59ef8228f5a3c1f6d126b8e70ce3a2e7105127745dc71eee1b4c4c8587ad8880617bf56bc2e