Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 13:35
Behavioral task
behavioral1
Sample
2f5e5a5ccd3f1529c19b64b3e41f3695_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2f5e5a5ccd3f1529c19b64b3e41f3695_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
2f5e5a5ccd3f1529c19b64b3e41f3695_JaffaCakes118.pdf
-
Size
69KB
-
MD5
2f5e5a5ccd3f1529c19b64b3e41f3695
-
SHA1
6fdbd3d2af146616abbe9bbcba28c24ed065f90f
-
SHA256
79becdc97fa35aff1e94bdf203893a9c80d868b102f4ea7b4260c1171320ebbc
-
SHA512
68dc484695471ce2b50a5f122fba78969112c549f97479db04529edd12300b3d03493adc55fe8cff3a2a3a72921aeffb668d7397447ed291bab63a0101f317ab
-
SSDEEP
1536:EGFmG2y7ZFuCLu51vgICdvjc7Tcxhr7H6+4hLueSwfr:RFmCZFuCTLc/4b6+wueSe
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2508 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2508 AcroRd32.exe 2508 AcroRd32.exe 2508 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f5e5a5ccd3f1529c19b64b3e41f3695_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2508
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58e476e92b65ef9795b40c5419bcfa50e
SHA156fb80304709db7140857143729296c283452537
SHA2566b698dbf2b16e54f1dfc2ce6544ff6446baa79f9ffac97fe20fe60876eb7a84f
SHA512a91f59e7c6975f4797fb8f20b7663d85c0fd94f4df4560c0c4beb20093817bc5a2b773c0cf8827c73596b6210b21efd93fb24af6062d86ba1c7e9647c0190fc7