Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 11:08
Behavioral task
behavioral1
Sample
4ac4f22399bcacc265a96b2070dd6e17_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4ac4f22399bcacc265a96b2070dd6e17_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
4ac4f22399bcacc265a96b2070dd6e17_JaffaCakes118.pdf
-
Size
39KB
-
MD5
4ac4f22399bcacc265a96b2070dd6e17
-
SHA1
c8f6b33139e70d68dc73ea681e0f8f7b5c4d20c6
-
SHA256
a7c9e0d9a68021df54a8cbabffaed258bfb17c7f41357b1f6106fc6d7d8d2070
-
SHA512
bacaefd391453bd6261a1825e440924997f69d41cd8c4eab17a39d35ac8ae76d76e230ce925266cb96640ae2807739950c12ef0824c2231e3babc4bc9fd3f056
-
SSDEEP
768:0XuMZmwgCLWar5iYY2xd1Rg2v1M7LcqsSa2W3e+4AmbB3R:0XFZmGWSQPMpNM7L0bNOzAmV3R
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2276 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2276 AcroRd32.exe 2276 AcroRd32.exe 2276 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ac4f22399bcacc265a96b2070dd6e17_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2276
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59ba97e32eaa84aba7791e4126839e87d
SHA151e3be88b0b3ce86cb46670ed04d90aa63ba631b
SHA256f64ec392c3fe1dfa6d9c833de30bf97f101004cf23100f1de093dc12c44d035f
SHA51244d4bcb6bef304aef1b2e39b1b5ed66d51e00b9065e75cd4d6814e5091bdadd7aeb6f2fac50dac01429e4fe8bd2dec8ba4b3f11bad4a873aa5a668f6fce774a9