Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:07
Behavioral task
behavioral1
Sample
ffdbfe26a0a92ab73f77bf73e0022239_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ffdbfe26a0a92ab73f77bf73e0022239_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffdbfe26a0a92ab73f77bf73e0022239_JaffaCakes118.pdf
-
Size
67KB
-
MD5
ffdbfe26a0a92ab73f77bf73e0022239
-
SHA1
dde1129e687dcd86cd62767e73f04c05389ae6ab
-
SHA256
2f82c04e6c5f41ac33fbe48bbb63bfc2dad44db379eb3b9a9f58dd11a62a5fa5
-
SHA512
3b678e4644788c53f80b3f2fc659c21541f1169fdd5fca139a5a7fb85eaee522f0e73e98f1690a6425acbebe0cc50991428d32ac1401d2243d8c3c6ac7cc8620
-
SSDEEP
1536:GAVMsOt/hrCx10TsMW4BMxqemm3J+MOGZbbCt:/VytVCUTJSs/mwmZb4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2268 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2268 AcroRd32.exe 2268 AcroRd32.exe 2268 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffdbfe26a0a92ab73f77bf73e0022239_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD564154e7d4c5bc6d90faea25afb546199
SHA1857247fc78883525baea90e4865aad47d271cbc4
SHA25634e4fefa529776db3b9c8dda6e3e2e02e7acb56429d46aa096f5f7836bcac098
SHA51216d9e3a7246ab5dccb409684a494c861685572025f6e7686f701fbc4325692fd5d8d8174e3db83fbdeee31ea46da19579ef920fb2e970090cadcb32bbabd3f3d