Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 23:34
Behavioral task
behavioral1
Sample
fde8d2ba99b5ee2a357b3aea22b8e4d2_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fde8d2ba99b5ee2a357b3aea22b8e4d2_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fde8d2ba99b5ee2a357b3aea22b8e4d2_JaffaCakes118.pdf
-
Size
32KB
-
MD5
fde8d2ba99b5ee2a357b3aea22b8e4d2
-
SHA1
611b13757bdf92e07b654832efe8792c09c9c135
-
SHA256
50e742a0735f24a0125202b5363dda37f108dc7960a0e44f1ef8a526899672e6
-
SHA512
a149122a761073eee4f4742b72280841b3551a03127aafa75046047ef3ee0c10f659a199f77c6a38472c7665caddfeb9f77f9196cc3b910a1fc33ca9d92f0495
-
SSDEEP
768:Q2Y403GsNDM2s9T5uxPyTQB/nKIFlIYwUKp1vK:pYrZDMtHmy0NK8I/xLvK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fde8d2ba99b5ee2a357b3aea22b8e4d2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD537d1b1a0c2b3539aef8172423c1e709f
SHA14129c2862cb1a45383768913f8d9394f64235b12
SHA25669a251e7a71eb743ef89e9da84eed6f6afd1e59e662fd7f82001838244be819a
SHA512a23f5cfd1d3c599c841fad44d44de301a0f93bd7c23edbc367878d3389667adc9211e89843d208daa47be372fa3d1ce65611df5ce2faebd3bf03218b0c532ad2