Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 12:01
Behavioral task
behavioral1
Sample
00b8ef0da12510f5897676cd47a796e3_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00b8ef0da12510f5897676cd47a796e3_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
00b8ef0da12510f5897676cd47a796e3_JaffaCakes118.pdf
-
Size
36KB
-
MD5
00b8ef0da12510f5897676cd47a796e3
-
SHA1
46e25d7fed50eb080ef607e5941c6111680bc2fd
-
SHA256
0f8b7a8493e043ccef21e9304a5e81d00f4491bb517896e75ac5c2e17a61a772
-
SHA512
e50a7e3bdae3e28c79e571a83284d30068573dc736265df344e97e3cb92687a14d62a8f17d6830a4dcbbcd512b62a60a7853990fa2c82b290c9186ad0ffcd261
-
SSDEEP
768:1XuMZmwgCLWarvE5HpxaRUHIWd00l58NanoOmGOHPmyTDMDi5B1fxkL:1XFZmGWSIjaRUHIWd00l58Nanlby/M22
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2180 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2180 AcroRd32.exe 2180 AcroRd32.exe 2180 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00b8ef0da12510f5897676cd47a796e3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5d81ca1c715009ed63cd669182819fd97
SHA19c0eeaa176d82dbfa2ee13d8e810f21a819c1b0c
SHA256dc125a8fb4b4148b15d30cd7cb7cbeeb132d2eb69463088b9db4853ed9179ce2
SHA512d9b0797cebd296961ae8f8213b2ce9e10797a0d781c7d0144e2f6a406370495c1c23a5af61c12e6e00e851be035f8c3300c0eb0289ec76c22fdc102a43435153