Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 19:05
Behavioral task
behavioral1
Sample
fff665b52200992cb50c3fc82ec53dda_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fff665b52200992cb50c3fc82ec53dda_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fff665b52200992cb50c3fc82ec53dda_JaffaCakes118.pdf
-
Size
85KB
-
MD5
fff665b52200992cb50c3fc82ec53dda
-
SHA1
42f239e88cd048b82c9cd3094d09ff77aa8d8d44
-
SHA256
1785a4a792b039c8be26a97ef100df70c0dfe9b1f49a4c9c6194a96dfb94076e
-
SHA512
76b0bbb13396f85f4f027ba412e51fc824b5ddf3f20b5e08f69a6b1408f87debf95106368b60aab9b058352902df348fd290f5cafb9a28add6abb5f74ed47bb1
-
SSDEEP
1536:dvbgbKPTMpju8n8r8lPJuAEx6anRFiC/ap64+88+iMXNzWIluvXYsWUpO7P0Qf:7F8S8D1YIC/c64180XNxlufYP7so
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2072 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2072 AcroRd32.exe 2072 AcroRd32.exe 2072 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fff665b52200992cb50c3fc82ec53dda_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5769c226df831e304bdbe33ad7073f79e
SHA1211bd5d312aec88fcf75845303075929c57f5a01
SHA256ec0fa9aa08cc2fd0dcca7e76cbf1321f46e4730c849e92d1be36edefcee7be33
SHA512bf2080134fc9e971ae17265385a5e93aabfd89ff17431e4ce388df8f90453b837e5dfc5fa1b09ba5e79c588b51167be1b2ad83bdc5c175daa8fa949af33722d6