Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28-04-2024 09:56
Behavioral task
behavioral1
Sample
04ee4f4d8433a8b97e6376965b372735_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
04ee4f4d8433a8b97e6376965b372735_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
04ee4f4d8433a8b97e6376965b372735_JaffaCakes118.pdf
-
Size
91KB
-
MD5
04ee4f4d8433a8b97e6376965b372735
-
SHA1
c2279336720e25287367443aa05acb899c41cf8e
-
SHA256
d3781ba2175f7c7a57a0ba7b078c5d7515f66d82cf83a87761aa27378fac9690
-
SHA512
3e230697ba65f48d1ddc2cb0c0229313397f9164583208512936cc8024116aaf380cea5605e0e1b8cf7d0285b7dd711c8d46bc3cadfbd6be41633a83904c4013
-
SSDEEP
1536:KXFZmGWSig14ee7ncSA6pJ0TUzncKYLweQXRRQbWcqe0mFmtT1GAdWXxyl8kS2IB:Aysig1zeDc5K31g/otYAjl8N2ImArrcM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04ee4f4d8433a8b97e6376965b372735_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d7de406186de891dbdd4a24089eabec7
SHA1093200d7e7288b66ff2b3f6c359c9fe707a58a3f
SHA2567d46e7758cc005e710c8eef5f2e271458f80b7ddcadadb7be2787fb6834086df
SHA51233971eca0b5cd214b554194b2eac995cb25d18641eef9b9ea0105c5e1a34a0bdb14ae7d27692a036c81e0779692b662a671bdfb09a6968208659c4884e7d4fcb