Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19-04-2024 06:36
Behavioral task
behavioral1
Sample
f9b7a90662c9ce599c00e950eb03c6f1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9b7a90662c9ce599c00e950eb03c6f1_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f9b7a90662c9ce599c00e950eb03c6f1_JaffaCakes118.pdf
-
Size
75KB
-
MD5
f9b7a90662c9ce599c00e950eb03c6f1
-
SHA1
9ccf652b7962b167c99f691731220655ea7a2062
-
SHA256
afc98ee78eb3a0e9b54da63f72afd66dbdbc449a0ef5381fbfffa71d92e05a7a
-
SHA512
ea6773067999bdac67a45a31d04d5dac0c1dcd1136e156469497d18e76cb9708d9414daee76ad509d4f92e6efcee097394096a9bfabd8361e5906157340bdeb2
-
SSDEEP
1536:2x/BJ/PeErqyvVZSQdr4aJJr/fPEJJkULrK4rxtoAQa0vGVF2RhyFitx:Oz/WE7nZ8JJkwrAAQa0vGVFyoFu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2160 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2160 AcroRd32.exe 2160 AcroRd32.exe 2160 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f9b7a90662c9ce599c00e950eb03c6f1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2160
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD564e80dbb6ec240f8f9041ebd97d673e7
SHA1d59b867333255fa918bfccc11256031694e5190e
SHA256dec51e95a7f99dbcd71a8d8ff0d923ebbaafda97afcf041c1e7c5b35f22b81c5
SHA5122538bbd7ae41bcf5267281811035be14a1c360e3618b9769f45b719711aa64981f5835a18469a3ec4f3a7e685872360f372a494e5650fd934599c330d9064add