Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 12:11
Behavioral task
behavioral1
Sample
00bdfdfa7de0709e9b40d38795f80e7e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00bdfdfa7de0709e9b40d38795f80e7e_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
00bdfdfa7de0709e9b40d38795f80e7e_JaffaCakes118.pdf
-
Size
15KB
-
MD5
00bdfdfa7de0709e9b40d38795f80e7e
-
SHA1
87f51b81a2ea8614f3199e6e4e3e87b542be3f3e
-
SHA256
cd9b2c4dd366294467466e5882a9fa1307fef1c81e463617b8badd66c6267390
-
SHA512
bd9f2234c7352d11a035bd34c07fbddf25272b3102b42a2d336a29e7dbff2b7e44a9e4ebb2da64958543ab5e3437586831c14fa658762f4a23e699bdb1403a3d
-
SSDEEP
384:VzAoSz1ixo2qX15/OPfOQ6Uei0yqe/lniTziPsLf2MGnT4idcIxvbiQlCV4lCbAP:Vzoz1Eclt+fOQoiX7lwW02FnrdxTi/V2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00bdfdfa7de0709e9b40d38795f80e7e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD502d1441de946ad3b29c9d914c1ccd5ec
SHA171f36f2db210a1c93d859748e795029b60b02fd3
SHA25631dfe141eac245597e4314b8d8618397997e3833b1ea872e11dfb32259f89f46
SHA512b42d791206d41d4c2ce67bd35f1f7beeb76b4711903e16e84763323437e4d86999e1cc68b13cfa80188523b63f7032d567ad4c5f8b19ba4498842f064730f3a6