Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 13:25
Behavioral task
behavioral1
Sample
eb2ae6a5fd1f1ee306e04aafd7136f7e_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eb2ae6a5fd1f1ee306e04aafd7136f7e_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eb2ae6a5fd1f1ee306e04aafd7136f7e_JaffaCakes118.pdf
-
Size
92KB
-
MD5
eb2ae6a5fd1f1ee306e04aafd7136f7e
-
SHA1
d3d97bfe0ff2fdf94b9e2ab3979bc5a8af4fffe9
-
SHA256
609db1cb80ddeb3c317c7ed199af5795ff909f6da7983b49b1ea31390168bdcd
-
SHA512
10de751e9967e0f82f4d35c1d60a9de2a06bd0ba18222d804776124718fc527a1ce3054a2b8881e1ba6429548e07dc318239e1c089257835b65a98b599573bef
-
SSDEEP
1536:Jc3N4fFAF1N10mtt71kdJmKnvyFkD2eC5V8W0eZCCW6u81IP6WUpO71WN8FMjE:W3fTfHt0JmMvAkD2LOf81IPV7NH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 756 AcroRd32.exe 756 AcroRd32.exe 756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb2ae6a5fd1f1ee306e04aafd7136f7e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD506b3fc9627594e0c5d5f94ccbc3f5794
SHA10a6a815136d5841bd34742dd3b90c2f401c17f23
SHA25656c62a216b9947f79c2eebd79cd41c7ed52fd16b56b45d581e31ab50db70c40f
SHA5123b9ce64ffae4cbbc95b9bbeb751de4cac9aa9ed17410ed54d85f8984b97482c9eeb8f8dec7097c0bac088539a7d7c9065eef6a4321ffd7cbec250036ebae68e5