Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 11:13
Behavioral task
behavioral1
Sample
00a3cbc1266c7ecba9a05ff8ba0449f0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00a3cbc1266c7ecba9a05ff8ba0449f0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
00a3cbc1266c7ecba9a05ff8ba0449f0_JaffaCakes118.pdf
-
Size
46KB
-
MD5
00a3cbc1266c7ecba9a05ff8ba0449f0
-
SHA1
13191dc0e59e3fe3626f9fd36d2f6037b52376c5
-
SHA256
6040996da87e9043851468be100e2951c64665950c521a6e87555588466b04c4
-
SHA512
e5af9c26f8483940b2bfba561eb96330d0fe2759b84df119369e52afa25735cc863dcc3ed3fa028ff623218fbd2f448d347b625a00ff78083df7839f04b538ea
-
SSDEEP
768:u7gGzpDCp+qxLMoQTZ9wApiN02T/HDsqYgoie7XNo9Ya18k0auOGNxqe6:XGFep62rHBYFie7XNA18muJrqe6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2184 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2184 AcroRd32.exe 2184 AcroRd32.exe 2184 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00a3cbc1266c7ecba9a05ff8ba0449f0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5ccc0c757b450d93063c15445339380aa
SHA11e0365b670f9a5908c7ef0a0af5b383e10157904
SHA2564ca5ce1ad9d6827f58851fedb1b1d91bf48388f2099a9d2464a17d1c870b1d6a
SHA5127e8a986a16976e89d2e7f5bd994cf74c31479f010455ef2956533491f475616f6a2e75e7b46965fc660f5e6a19379a676f9a368722f880446b00a20aa7ca2a0a