Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 11:41
Behavioral task
behavioral1
Sample
00af7e90ab8f696113345f67a16ac77c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00af7e90ab8f696113345f67a16ac77c_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
00af7e90ab8f696113345f67a16ac77c_JaffaCakes118.pdf
-
Size
81KB
-
MD5
00af7e90ab8f696113345f67a16ac77c
-
SHA1
dc6678062bde67fdb65a25569aa1824c2cf719fc
-
SHA256
fe78f3efb55284007090aa97216c1345492b0027041ca653db876966c77675a6
-
SHA512
f67deb5951685512ce4e02edc68d3c3aea9ba67306037ecf7d9f992304d8d1d0cf6c4ff10f2df8953bb7a638f184e5c63968b96fc1b113a9734a02ed815d0cab
-
SSDEEP
1536:kGFmiAPjJ8Q6bU+pWPZIpxufFFAOMLKt4PZNWzZrTzg:xFmiSWePZIpx4FGO0KuPZUFrQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00af7e90ab8f696113345f67a16ac77c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD569bab5565c9631f38d0bbf14f06dc92d
SHA1061872db1ae4e22704dd8146c82a047d774f1f81
SHA256cc98553e1bb4b6776d552c989a9e6fe36d39aa719be691bd3b86af70ee5fbf86
SHA512257b500b26e5801185e8375b4503e5b3b4538bc20a0854045f951ce3b9ecfc584346848ac8144aedf8ca3f4b0cedae840e1fa04b9e3b669322f0d5e45f34deb8