Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:13
Behavioral task
behavioral1
Sample
ffde79bf1efb87b135d35d848c403b36_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ffde79bf1efb87b135d35d848c403b36_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffde79bf1efb87b135d35d848c403b36_JaffaCakes118.pdf
-
Size
87KB
-
MD5
ffde79bf1efb87b135d35d848c403b36
-
SHA1
fe0f56a1aa08daec08bbd8a09c72025b0109b16a
-
SHA256
703c82d94b14d03ad0de5deb35252a30a83533317691f1a37323f9bcb828c012
-
SHA512
bc513b79034b96d820b12412ef34010e3e865ed32057dd01e06ec72ce94fec13b80d81061791e6586f24c82b710edad5d17b745f66e959b897db46ec17fb3d5e
-
SSDEEP
1536:+ZRbZU6ARSZp+/M9/poG7espTyzsXQGKCgslBfckWkNpOPaWqJtKThyABPRLZEwo:KbvZp+/c/T7e+T8sXQGPBfAPjThBRcBv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2896 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2896 AcroRd32.exe 2896 AcroRd32.exe 2896 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffde79bf1efb87b135d35d848c403b36_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2896
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD58721e4c46a1f0660f6ff25a72f2f5bde
SHA1ae9737ef905db03e021e61dd3c7db4431546920c
SHA256e60735a1f125ad3532535b8994b7d7e45ae1fa6cf8437c217f07d5b111ca4324
SHA5121e1fc8f0d470d7863448d6871cd1fa8df9b196f5b62ee770c5a2a0d93c7079e23e8ded6069a04639a9f8789c4da3b35587ba4ead494c9d9efc28c5527d65ba1a