Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:35
Behavioral task
behavioral1
Sample
ffe91a4b86176284c311ce5fb39ca15b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffe91a4b86176284c311ce5fb39ca15b_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffe91a4b86176284c311ce5fb39ca15b_JaffaCakes118.pdf
-
Size
71KB
-
MD5
ffe91a4b86176284c311ce5fb39ca15b
-
SHA1
9bc3b19d5ecd2669c707e32ac0d65999d78fd969
-
SHA256
5095fdc9ed594d6d24b370977198a765877e96113a352bd8f83bc94aedb64afc
-
SHA512
2556db87e64e6a9e19b39b8ea76a5b2b5e928d4ae17465262a56a0ed46fb48aac8b2897330ba16d94f53dd566773935b5e3e7eb1dba8bddaaf34a147d9a1113a
-
SSDEEP
1536:uHZIeisStFfYUGh7R4H58GSwLtHPKWkNpOPQ/aiSWF67RAc6o:6eBsStlLG9Ga/w5HnPUaiT67RAg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2076 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2076 AcroRd32.exe 2076 AcroRd32.exe 2076 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffe91a4b86176284c311ce5fb39ca15b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD52a98c2b7e6b80df895e6db753bd37210
SHA18ba5e82738e064d52d0f1a34b53115dc8da737d6
SHA25699898387a7e30f37a01cf959126132831ac79da60d9c3a10adeb9ce21ee6f3a5
SHA5127346b58a318f99aad284b546eec04edc74c2407eabaa74eb59cf3cd9ca2e8f5fa3f2d91441d6553376fe098c966e877364115b93faffa1db47cbef456b0baf35