Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-04-2024 09:48
Behavioral task
behavioral1
Sample
eac9dc7a9af6f6afab9f1b6a130cd35c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eac9dc7a9af6f6afab9f1b6a130cd35c_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
eac9dc7a9af6f6afab9f1b6a130cd35c_JaffaCakes118.pdf
-
Size
96KB
-
MD5
eac9dc7a9af6f6afab9f1b6a130cd35c
-
SHA1
df54a2bd978a8279c097676e44442948287c2fe2
-
SHA256
0e582514f40bdf80b1f6ec2debac965b4aac8c74ce8f54c4582311ea475245c1
-
SHA512
258f6923f03ab04ade143f91c4947932f0621ba436aaead6adc0dd3ff5accff0e936979c43ca2e5ba363e9c4013ab372587fde023901f824ca446a7b77e1b5c5
-
SSDEEP
3072:YmRoZ7waTjbaf72khjevwx/IEiaLpx0y9fQMEUr:JoZcqaf7veoxAG3mMv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2024 AcroRd32.exe 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eac9dc7a9af6f6afab9f1b6a130cd35c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b8fe5b6660704d96e84cac1a92238290
SHA1913622a1a73d31cbebae62cc22fbf2c1b8548e28
SHA2565ca34064cd3a410cca6e5186f8974f1ec967bd484a04e82d78231ba5963c79c7
SHA51248e2ce4fa6f8fdca61ffd5c90255f894e424cb1f0217c765d66112edbb9172dab7a836f57831c5fdf728ee4d6521a43d96560dc053a8c6b4ff96add85f44bf9a