Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 19:21
Behavioral task
behavioral1
Sample
4cad6c21b6c7b28fde8af7b702f2a8af_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4cad6c21b6c7b28fde8af7b702f2a8af_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
4cad6c21b6c7b28fde8af7b702f2a8af_JaffaCakes118.pdf
-
Size
7KB
-
MD5
4cad6c21b6c7b28fde8af7b702f2a8af
-
SHA1
4bec2f314ecc9672bd0b51f08ebad9c4ab7a171c
-
SHA256
45780bf0691e7a3b6db0fbb69ff74522add08ff0856724572d2fd4a78909f35f
-
SHA512
34add24314698e5001dce5e9e63e933f93b5a5c8dbde0905e4998af25e947a4e071dc31c8b5eb2d2503aa0692d6bd4c16ae1d92afa5b56aa70454a02a8c98ea6
-
SSDEEP
192:tA+qjM40WVljm5ehR+cf1Q4JG3vD1uaH+VBB:2+4MCecNzgTHEBB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1708 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1708 AcroRd32.exe 1708 AcroRd32.exe 1708 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cad6c21b6c7b28fde8af7b702f2a8af_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5c2e2f586f0eb52cda69aa9319e45cda2
SHA1581b22baf5303a86ef1b39153ef47f18ce39b1ec
SHA25605b04d1e47ff171a538969deb4387f3586dd08055f935313c0f6317a74adc1d7
SHA51263f17bc6d02b4cc2bf49a079972bb2c513fe7c552d76e78caeb4614db91efaf273c33be391033364dc7c0b9404be962f936f118be216be1ed44277eb995458c3