Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 10:46
Behavioral task
behavioral1
Sample
eae2dceebce5aa59a13d4ab5c107f2aa_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eae2dceebce5aa59a13d4ab5c107f2aa_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eae2dceebce5aa59a13d4ab5c107f2aa_JaffaCakes118.pdf
-
Size
45KB
-
MD5
eae2dceebce5aa59a13d4ab5c107f2aa
-
SHA1
e0aa2051475ea51148d5db70c480622076867d14
-
SHA256
c011356b3418f91b00cb7b2a37e6aad7d237012c087722c06b8bccd5cc39d986
-
SHA512
acec0536cee66ac2d5102aca362415adb0b2f6187c63223ac9b8737a7c60f590fdb4c3e190fdb12c71dd329566cc121cccdcd3e472282306606edd873dffd479
-
SSDEEP
768:0DjG4NxNpTj6yAuaaXzqZCB9RnY3/ZVINNk7TNrUGcvJECQ+42ola:0m2pPMuaaeZCB9O3JTNrU1Bgsoc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1924 AcroRd32.exe 1924 AcroRd32.exe 1924 AcroRd32.exe 1924 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eae2dceebce5aa59a13d4ab5c107f2aa_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1924
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54ca25032dd19601811a03f1c4ffe3cb4
SHA1b3fbc982034eee81293a1b51f353882d01c4e675
SHA25640c756d6a93e4e25af1c5554bfd268b442e72c3d1d10a3981b40cab909c5fa09
SHA512a7bfaf2a043db4657990c196ea9b2ad6780d10dbf0130f2ad9902a0b653e50182ada84d3260c7e9f3bc90df6dd0cb88eccea50a434ced27325cfe447383bbdf3