Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:37
Behavioral task
behavioral1
Sample
ffea032adfc44353579e800c8be83fc5_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffea032adfc44353579e800c8be83fc5_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffea032adfc44353579e800c8be83fc5_JaffaCakes118.pdf
-
Size
78KB
-
MD5
ffea032adfc44353579e800c8be83fc5
-
SHA1
2042f59f7b8ce642d77fce4354ed8a8885de7c32
-
SHA256
116e97a3c035a8de940b09a1abfe22ab084821c184f5760447233abd5cdff1dc
-
SHA512
649adae78940f1e00a9d6c8e9c3934b40bbb991084930e8abe43798387ed9e3d67b2e7c88a8edce197a134091fa1ec97cab4b1cd8fd4f2bc20dc62e9cb18ab70
-
SSDEEP
1536:2Txf0Fhg/EpsZvy3pkh6gq/sSD7mmYcYOxh0jAEiLuEw3eUdLbZkP6mIe8SxxqB:fF6spsOCSD7mmYcx0jADKvdfZLe8SbU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2308 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2308 AcroRd32.exe 2308 AcroRd32.exe 2308 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffea032adfc44353579e800c8be83fc5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2308
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5c42d3aa30771b2a009bc1d0872a61cfa
SHA110cab8f64b999e21fbd4c47aada1e9219d87790c
SHA2564d6d6ae1265d365d1f5d80162ff747b0ae8da9016b023deddedbddf9e0c315a8
SHA512097810f8a1f711186facfa24d488dc1ac389b65f54f8c063cd736c9d686825a9f6b7919f7eae32fd2e645d4ca1861b609f9853d3eed8a81c7b2a00114c47ed4d