Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 13:54
Behavioral task
behavioral1
Sample
ed93d35da264ac9a7b08f4c221f70734_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed93d35da264ac9a7b08f4c221f70734_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
ed93d35da264ac9a7b08f4c221f70734_JaffaCakes118.pdf
-
Size
74KB
-
MD5
ed93d35da264ac9a7b08f4c221f70734
-
SHA1
d0299d6f4ae45cdcd09ee76ab21bdaca6107a139
-
SHA256
c98bc52f8e40bfdeb6853ab1771e7fb660b9eb1e9b92782dd2a6fe40cf7383fb
-
SHA512
d3866e3afffe97e732ec7546fca89dfd9c09b001b51b474f7c6f93c62acdd82affe7e4f9b26fe1c2c28ecfa83c5892d4a9105626b3cb4f05e1b7a9f172371915
-
SSDEEP
1536:xVKla317BJ34EKLQ05H5+uV4Ll6WGpOKCWiz2uVYXLAE0TUh5NaEhfA:nKY399KLt5ZJV4LljKzKLE0ToqEe
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2020 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed93d35da264ac9a7b08f4c221f70734_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56db3fc5327a4f73575ef1cf04dd374cd
SHA165c49f24cdf729ffbb4878ad0d777ea0c204442e
SHA256475e726e62db263d170521fd6916b306354aea353b94043586ad47c848c9026c
SHA51263a8ba71da05e59e518c80ef576d61653298532c017779e15d0d3aaf7d84a6db974d8996a22577a89dfc08c7d508fa8ef7c792dacbe2814ee9b2a0035a7cd405