Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 12:27
Behavioral task
behavioral1
Sample
ed6bd66648bb9a38a9e567d7dc8c9646_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed6bd66648bb9a38a9e567d7dc8c9646_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ed6bd66648bb9a38a9e567d7dc8c9646_JaffaCakes118.pdf
-
Size
90KB
-
MD5
ed6bd66648bb9a38a9e567d7dc8c9646
-
SHA1
ddc4e5c8a48f9b3e04fd4489a8cfcd24300496bc
-
SHA256
0a9fe1458ed7f195f587d8da735288a44a07e69a82dff52ada226fbb2139ba69
-
SHA512
c321ab6039929592e3fb4b116f4554426ef6a0b400ddd79c19dbc5b2c36a67bc2b7bbef6f87d4cca2a4be61a7d8d0ba37305e056a7871dfd4d11c36f2de07f00
-
SSDEEP
1536:rlefI0X6A2HEjmO8l8y6JJF3CZlRWyWYtWh9AkoszZ0yW6pOu2Nzzm1g/:hefXK2Jykr3CZOyWiko/fu2FzZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2100 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2100 AcroRd32.exe 2100 AcroRd32.exe 2100 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed6bd66648bb9a38a9e567d7dc8c9646_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a0f6eb7e92f051e829bc8ce5b962460e
SHA100d7b54e08a4e8c63daee3b61e49135849a9b011
SHA256115d11c708ff8281b22af361cf0abf61efb73c56c04490d118bcec2264e49e32
SHA5129832266cd796a30c5ca39c620399051cfcf11b8ac69e656fded25d16e4556913b40bd57929f3723c8022a84ae5e074dc50abca847caaad106b2678b551399134