Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 15:39
Behavioral task
behavioral1
Sample
eb679f077b750f880e89f3b4a85ee517_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb679f077b750f880e89f3b4a85ee517_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
eb679f077b750f880e89f3b4a85ee517_JaffaCakes118.pdf
-
Size
80KB
-
MD5
eb679f077b750f880e89f3b4a85ee517
-
SHA1
992bd09031c9b312ad7b3b84d6f009dd3516e67d
-
SHA256
bbdabb39876b14ee0b88f111e933b55b80f9650cd483d0f552691ac7691380b8
-
SHA512
8da3d46bce03ce1712064561f93df110fd748fb8330a760607bcb06b5feb7238932eaff5cb62217b82c16815cf16fdd38b1bd2690c5c84df4ef2ca7284e2b73c
-
SSDEEP
1536:/kUS84HPKwl4UD6lb/zHtgcvXD49oPMWkNpOPPrf0WXzz2R/ldsLa:KnPKwl4UEzhvXUaBPjfbzz2xB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1704 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1704 AcroRd32.exe 1704 AcroRd32.exe 1704 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb679f077b750f880e89f3b4a85ee517_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1704
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d2b3672138116fec4e2817492a68bd15
SHA1af80e1bd86307a71d59dcc221d9350d9423d1647
SHA2569227e7d551a387b044f6b136c564c06f0dc74f8f9f13779b14d716ae30514cfc
SHA5123ffcae472907c84c8dd6cc6c3bd3f8a34db75bb05aafda08d4a00903fb0eca7190e6169ec9c87a50fa1d5ee69f9f0d932fb9e0cae6ef644eeee252553bf1b144