Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 07:06
Behavioral task
behavioral1
Sample
119cf97b69aa55c617c8a0cd37ac8608_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
119cf97b69aa55c617c8a0cd37ac8608_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
119cf97b69aa55c617c8a0cd37ac8608_JaffaCakes118.pdf
-
Size
37KB
-
MD5
119cf97b69aa55c617c8a0cd37ac8608
-
SHA1
127479b7f927e9f536e82059269cd3bc3b9350a9
-
SHA256
21a6c141754b702a032a5ac7725dbda08daaf18d80ce28576635da4e2c678501
-
SHA512
fdfdfe102e2579e8904abc9f4f804c629fabedf2ed3bcfbc088cd6c2552ad38eaa476fe912d2bd9f577eca53b396a7e0597dfacdd9916576f3682eff212ac38a
-
SSDEEP
768:vU7gDUVI4yyf1mFuxDQBalFn27d5shgvNBryXD1wpIApJwWE59XuMZmwgCLWarMO:c7oUG4yyf1mFuxDQBalFn27dahgCTOIz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\119cf97b69aa55c617c8a0cd37ac8608_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a178f1ab4c6b75bdedee0f67c9d23d35
SHA1a20dc3bf7c140e40e108b9d4f391ce98a8662ad0
SHA256b85b8e5965733c0ec243cf49b94498847987581c1b62d52babf3c8a57c65599c
SHA512f442cf59f6d2687a6203f07942eba4af10d4971138fe4311c911707c6aa1f68c560f9094db61095d443fe1fd620bb698a74c9c12b1247881b91056fd8fbe15ba