Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 09:47
Behavioral task
behavioral1
Sample
ed22103a8e2e8b58734d4a342d39c31e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed22103a8e2e8b58734d4a342d39c31e_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ed22103a8e2e8b58734d4a342d39c31e_JaffaCakes118.pdf
-
Size
34KB
-
MD5
ed22103a8e2e8b58734d4a342d39c31e
-
SHA1
a0404686c48201df47890ed19014b1ce26e0a68d
-
SHA256
27815eda73f206aa1a95edac84f5d81ddd19bcf2c03966c3c6754a7803699a4b
-
SHA512
e4e24d971bf52be179693a49b049159fbf9d4ab27d8767bd9f010abc7b6b5b05b721dedf7f8f756e90255cd29cfdc99805ec268b07aeaffdc4f357638aa35fc0
-
SSDEEP
384:e8nzawI/ZyhvDdETQ21RhZT9lWHwr+9HCUS6h/6OKw4CLEGo4ZSAL9+AL0CUScsx:1nyZavDGJDDSo+JVh6+EGo49+A42
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed22103a8e2e8b58734d4a342d39c31e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD585e7c2c1cc549ee9c84e09b186da80cc
SHA10c3e5b33100dc985177183e9c3453dcb52cf4b1c
SHA25615fbb70e6aa81547b317cd3f9cac2bd21513ea4aada2a640a249d8db07b6c052
SHA51201a8ebd49300a950c8be713b6c89bc6036218259c601b494f2db0f1785c3383f94e531a272161dc6c883bae18e6857968604ef18bfab59ca9d2df059dfe366f7