Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 04:54
Behavioral task
behavioral1
Sample
ecb55e9214752fd2ffb091866010c304_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ecb55e9214752fd2ffb091866010c304_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ecb55e9214752fd2ffb091866010c304_JaffaCakes118.pdf
-
Size
74KB
-
MD5
ecb55e9214752fd2ffb091866010c304
-
SHA1
757e50e725d7768e395eda5cabade6687058af66
-
SHA256
41536e89a3c04ea9159d201bbac28972946962c12ff6bc62004902ed97143c53
-
SHA512
5bf07bcb9aa6f480775d4ddbbcbf6cfe46c88d42ac111ae6540ca512dc92591d208fff7f7145b41d887ae279fb2c62ecd49744401da6db13728056ba331742b6
-
SSDEEP
1536:rtB88LkvMkNNdVZiOSaA02BOA8twQK30at7aoxyhNVACocWOpOaZRz6lWVJdSYgM:jhL/i6aD281GR0at7aoxyhNVAbZaZRzP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1160 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1160 AcroRd32.exe 1160 AcroRd32.exe 1160 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ecb55e9214752fd2ffb091866010c304_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1160
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57a66ebf4d442238e6acdc4e4b790bcac
SHA19619795ee80464898f54858b5be5d966e72a349d
SHA256c9a06e071cbdff2ec0d2b669a3354b3c4cded90f2fca2f393062f42eee2928ca
SHA5121df93e1d1a1191d4eedec7f1472fa1bdf58e7ba4c0e7e10b0cc4db1e37264f6c88e00dcfad378e8112b576c4d73eb3447682a15f79a108102ab639ec15023230