Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 17:38
Behavioral task
behavioral1
Sample
ffcee35b95af9d108e6c9b4f1c175ed5_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffcee35b95af9d108e6c9b4f1c175ed5_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ffcee35b95af9d108e6c9b4f1c175ed5_JaffaCakes118.pdf
-
Size
87KB
-
MD5
ffcee35b95af9d108e6c9b4f1c175ed5
-
SHA1
f7681d7e39bb1d88832d6cbc10bc87d4113079ae
-
SHA256
e9c2b06082fe5cdce8d64357d0b648ed6314453fb42a2764f1b74eb26b656b06
-
SHA512
9537d494af471456c60efe3a9759072ba6e16e6c48663c4debf0c84ddedd507db6b9a9489c3c794f4640e4781aa2e53502e4b0147ad4bbcb97da70d27cf5a24e
-
SSDEEP
1536:XVWLiqd0UItvRaZ1EjmcDtIr3756qPWI0bvkI4+X/cfVWapOtQHWx+5z/t1w:FWLiqHIjE1EicDtI7FbK4q4KtQQ+dY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2208 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2208 AcroRd32.exe 2208 AcroRd32.exe 2208 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffcee35b95af9d108e6c9b4f1c175ed5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2208
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5a7afbec6f91c2b6131949de74ed612bc
SHA12aa623f1d4cfe8a45ff164a183527c2e0e781509
SHA256c42e964250b9e5a3be40ca45be7922639e80fccb2732c1370f3daa10a3d85f1c
SHA512a1c13ea1a48623ab295d481f9a23b01ff6d461f032ccee1e40dd03f60abe66ebfb49bbb9a41290da2397467354da9198d2af66f4830c8cb6f249968accd179f2