Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-04-2024 13:31
Behavioral task
behavioral1
Sample
07c7b83eba3d2bdb6e8989b5c7d0ee27_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07c7b83eba3d2bdb6e8989b5c7d0ee27_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
07c7b83eba3d2bdb6e8989b5c7d0ee27_JaffaCakes118.pdf
-
Size
374KB
-
MD5
07c7b83eba3d2bdb6e8989b5c7d0ee27
-
SHA1
60a3d51840522f4a3765093828b76bd0e6a0ab68
-
SHA256
68e0d0543c8917ade15d51976c6f533d8a7bdda53677f88590a97ef0bdd1e4fd
-
SHA512
01c6b9fc15100a1322250097aeb5c32066edb7e0e7b1f8b79847fdca3915fbc2f5632d9428be10bb37cba7b53907632c6e212f6ac7234458f3c068571f255f7d
-
SSDEEP
6144:UossTbP0Mij9gLELycBaddRFGUgobvq/z0Ajgg/ws8h7aQRoLF7y2zHgL09sCJY:nssvP07SHGU3O/zljn8hOFmgALHj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1504 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1504 AcroRd32.exe 1504 AcroRd32.exe 1504 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07c7b83eba3d2bdb6e8989b5c7d0ee27_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1504
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5038ad39ac84de0f0141fbed1cd6e4e3d
SHA15876f7bcbd605a52bab19dac633c3c14d24550cc
SHA2564aadde60525213a09716db69cb99ea5c3b4795102b350ced8f7f2ae6e5bf063e
SHA512cdd5c11a3f787c4a8749124679191da2935be4698b81c11ceb3f4408aece4c14e22981d9f829486980064773d06bdbe958166cb4ba8f7a07e325c98ff295ae11