Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-04-2024 20:23
Behavioral task
behavioral1
Sample
0001d4cb78d0e99994b0240451413c80_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0001d4cb78d0e99994b0240451413c80_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0001d4cb78d0e99994b0240451413c80_JaffaCakes118.pdf
-
Size
32KB
-
MD5
0001d4cb78d0e99994b0240451413c80
-
SHA1
6f2f263239b8cc10a4af690f598b4abecf9d6866
-
SHA256
b1595a276d70d21297f578ab59bc85340ca6a3c12b63b904b51714bbd5513cda
-
SHA512
9d93f619325a3338c2f53c4e2f9e3f98efd98244e2c182373ab5dfeea414fccd7fb0411adb867ff1844950ad0ce1b1b12370d6e420b1d81f5baedbc8db5b74b5
-
SSDEEP
768:EWfINiNoZ1ljlqcgk6XV73ObHQ8y0TsDgvE/od5+AD8LKhtaSIVJhw/zX6jZIuyF:jYZ/jlqHTqW+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0001d4cb78d0e99994b0240451413c80_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5dabc365d0e76fb526a9baa7bba97bb08
SHA142b8e4ba551518f390bc804eb9299cd0269621a8
SHA2562b49122a9fe21f37951635fb96ebba426a01ae9010aaeb3acfb39bdf6d0823e5
SHA51292c5107e2e9a95c8b447bcf63d5302227a01fa6fb65ad5c08b23a9eeb0db5df953fd1905de967c75988e89258771e457636a39767253728e81c712739a7a3110