Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 14:18
Behavioral task
behavioral1
Sample
eb42913fb9aae9209fd0dc585eb48587_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb42913fb9aae9209fd0dc585eb48587_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eb42913fb9aae9209fd0dc585eb48587_JaffaCakes118.pdf
-
Size
83KB
-
MD5
eb42913fb9aae9209fd0dc585eb48587
-
SHA1
90394c0172bfa9e238b489196835621382269c7e
-
SHA256
3d9e68b0867eabb879674be90e40fe7d1942908862f6fc57be3a7ca0d599091d
-
SHA512
1ffb79ab176bc36183cd319c8e4c9d2889977592fa4f245d407884bb9708d03093e68f22381f8d981b59214519a3be7d9c14940187884a87ec6cfb43687349de
-
SSDEEP
1536:dFHuszp6YNgRFm8/zTLaP83BNo2K2SxuSS2oU+z1H5eduKZlWHpOvx2rNH2WKgG3:zhp6YiRFmOzT4MtKbxuN2V+z1Z0uKZD9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2224 AcroRd32.exe 2224 AcroRd32.exe 2224 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb42913fb9aae9209fd0dc585eb48587_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5610e0a8aa77d790f21ab0f998a81e109
SHA1406674ba62ddd52cb156afe601fe2aeeb9797f71
SHA25605b3e37aed1c00e9d89d73eade41ad5ee6e2aac4e632e473a6b4ea9fb9fe7182
SHA51267e820914f18899f185d2cb9226a11d19ffb64aae7f82feb054ee77e86d02d0af09393a84323eb396787b51c43b40e9a98ba78a393bf954446ab92713d3eb3f1