Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 00:05
Behavioral task
behavioral1
Sample
ec46966be3b26c1cefe01f9d15a15f73_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec46966be3b26c1cefe01f9d15a15f73_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ec46966be3b26c1cefe01f9d15a15f73_JaffaCakes118.pdf
-
Size
89KB
-
MD5
ec46966be3b26c1cefe01f9d15a15f73
-
SHA1
0be78fa02e46db612900303bbb4477af28f0979b
-
SHA256
7bbee7cfa0b08009ac1617bad01ad27067464dceb7fd216b1a5d565c09cd654b
-
SHA512
20d6981efa5544afcda4cad406bab98a06d066343a40b786772d89505f13dd3c0a4eaccef1424ea045b5e386c7fbfacc35f02f432862273c341188e05ea3e4e8
-
SSDEEP
1536:dchYgdcrH6iFhr1N4tqX8UFl5G6F02xDOQr65VS3TO9n59WOpOwrKWe5Ec7LsaxJ:GhYgdcBrUcbV02xD/6583TYn5awrI5Ea
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ec46966be3b26c1cefe01f9d15a15f73_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58f699c70cf77564dd66072b41b7c0a3d
SHA1439b3ce406b57e4e35f62b98f4e1e0c28b0bb0ca
SHA256991d24318aa1b1c93ec955ff4ab766dd81b3250684acdfa552db2fe6c42e8dc1
SHA512ec622ed74396d639563e066c9f2f723b0eeb55110074d9901188d9794df3d9047076eb793a4fb7ffb7143d03305c931d868ff39b1547a99733f4d694ad46def1