Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 17:24
Behavioral task
behavioral1
Sample
ffc9375f7edaa925b6576c8edf4ac6b7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffc9375f7edaa925b6576c8edf4ac6b7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ffc9375f7edaa925b6576c8edf4ac6b7_JaffaCakes118.pdf
-
Size
88KB
-
MD5
ffc9375f7edaa925b6576c8edf4ac6b7
-
SHA1
b81cda53f48d54297a8cc17807f775a626ada936
-
SHA256
aec25a5cc5990d03b935953cdec86eacd95c3f3c37d11b5daa6f6c90557d0ef9
-
SHA512
cf77dfbd337faf0d9aad9280cce09db3e1ba494f825b7cab8bd3d547712b3fdd27a0e09879901d955d55a6c9cd0d32e5b07db376512aee0d9bcada42e5383a6b
-
SSDEEP
1536:cE1ujXGT3Nzugo82oOa8pA6S0mJrOO1jEw9qw3fmq7WPRDQHtvqI4vbH5WwpOSsn:3Ej2zhZcaxXJByw9DPI2NSI4THwSC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1784 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1784 AcroRd32.exe 1784 AcroRd32.exe 1784 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffc9375f7edaa925b6576c8edf4ac6b7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1784
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53eaef457551fc2cbd06582e22f9730d2
SHA1fbde81eebe49e7b414eeab3df35b1e98c8e4b996
SHA2561a131738886cf9e6d4feff921be373c35ba55af1562df15740afdbbd77ded120
SHA5128964ff6af0fbc0d44f2a05129fe48abc036c838b5d8a9ce1891e5827c7314a53e5de2c947a1b4094fc165fad2ae065db2b4b506f521ca2ab2079e722900de537