Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 02:16
Behavioral task
behavioral1
Sample
22c56ab755c40e9627d77b4c62b6876b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22c56ab755c40e9627d77b4c62b6876b_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
22c56ab755c40e9627d77b4c62b6876b_JaffaCakes118.pdf
-
Size
185KB
-
MD5
22c56ab755c40e9627d77b4c62b6876b
-
SHA1
1da70a6ac9e281af9294f55812c7915eae0ea429
-
SHA256
9221924f0115b3d1bd854bd7eb3524bb3f43d67a1923f5a5f7eac141d8176895
-
SHA512
0d69a02fa297d94081e44e0ffc6a2762260f02974df4184d6e73de4a418158eb7eeb9f3d65b6a15d6d38825ecfd3221f2517eaa6ad0f6128fdf5a1d70d8c9cc4
-
SSDEEP
3072:12irbxzGAFYDMxud7fKg3dXVmbOn5u66KjnxDiwGpgluxiafY61ZUbHPSX:12MKlWQ7Sg3d4bOLP3YsaAjb+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2892 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2892 AcroRd32.exe 2892 AcroRd32.exe 2892 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22c56ab755c40e9627d77b4c62b6876b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2892
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b4e8effac114e5fe11b4242d1a1d9f96
SHA12a6080cf3cff5f2fe8963a8ff7299abab70ac2fb
SHA2563284339b09fcaa5b602d13a6c72c37f39013d8fd9f64c10f41837032d57b2310
SHA512320cb13db4ff5e83b29add6b844df1a538cd24a013344f4f6c067ae02daa90162b37a1096f42f8436c4494445c91bf4e02b631cfa9e8d465025661e3b678508f