Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-04-2024 20:43
Behavioral task
behavioral1
Sample
000978c36c44f75587944548c0f8d0cd_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
000978c36c44f75587944548c0f8d0cd_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
000978c36c44f75587944548c0f8d0cd_JaffaCakes118.pdf
-
Size
50KB
-
MD5
000978c36c44f75587944548c0f8d0cd
-
SHA1
cb661e3cc98fff76f030ff6463088a696905b66d
-
SHA256
4ddfafd5370e30c9b611fb89d71afbcae4cdf783b867a8f9a85821cc8e3c2b27
-
SHA512
8d16a1315b6b56f9f3e148cb37c2acba7aae26e95a2715a79d0ce3af91df75e2ccf82021d70de0d9895c20b3e576372e8bb58388ef5474df651d41dc94590929
-
SSDEEP
1536:sGF1pP1UhMMApNElAFBqdzszGjHWLYBrqu:JF1pLFWlUB4zljaYBr
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2476 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2476 AcroRd32.exe 2476 AcroRd32.exe 2476 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\000978c36c44f75587944548c0f8d0cd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2476
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD515364bc3d8941c916684736ac57a9eee
SHA1106f0b4577315741b35a0ad6654b520a507fcc69
SHA25675494698b19c0eae4c88d170ef455b17d5cdfe32a679cf2ed8a69f1e43ef7657
SHA512e59db6a92d856c71c76771a7ca1881ee0257d468a724196ff85ea0ae8187d90c85764e6e45df2a0d1208b4497cc55e81ecb09a7397b2e638347c27b7c3b1a8b9