Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-04-2024 21:08
Behavioral task
behavioral1
Sample
00147f9ddd333fcd32231be335ecd450_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00147f9ddd333fcd32231be335ecd450_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
00147f9ddd333fcd32231be335ecd450_JaffaCakes118.pdf
-
Size
34KB
-
MD5
00147f9ddd333fcd32231be335ecd450
-
SHA1
91d58b445232ebfe2337fe5802b71025a74cf87a
-
SHA256
98f73b621d18749a913c7629c5a5ec4b292e535171c887613784c30e87146fcb
-
SHA512
f86f4f202838f9fece2c609142779acfd62623f9ddef3a51bed5ccdc6ef3238f75b8d2a5a578687b07e20de7eb3308f9f16cc7cd45a1a116bd308fc1e7ddde3e
-
SSDEEP
768:k//XCH64Z45T5Qm6XV7Nda7E9Autsnw25odgK85tL71r6ggZynLP08W6AiJnHDx0:k/fCxMEX41N8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2884 AcroRd32.exe 2884 AcroRd32.exe 2884 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00147f9ddd333fcd32231be335ecd450_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD51b7379410f22e0afa40af5b32a014e69
SHA19f76a54aa68f201aa5f1a65b709ee358ab505312
SHA2567ccc050458afcd85f403ebcd57d3f1a8388de647682f3fa86da76e8d31828a6c
SHA5123f8855040c999471d7c4c80833c273ec732bb1aa19873fe6cef2688dc8a37fa5b07a920ba414fc376b8b166a2f56901549f9258a77d02b8a1054a3c1aecf3ef8