Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 18:58
Behavioral task
behavioral1
Sample
4c94121275896b6d921bacf0ae94c9f7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c94121275896b6d921bacf0ae94c9f7_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
4c94121275896b6d921bacf0ae94c9f7_JaffaCakes118.pdf
-
Size
34KB
-
MD5
4c94121275896b6d921bacf0ae94c9f7
-
SHA1
1fa9bf7edd0475062094e379a43b79105df34b9a
-
SHA256
784de6ea375c48bcd20fd561faddc7fcc3d5e8ca8232752e39c346d20e3343c6
-
SHA512
1e3e0baafaf000b890d544bb03ca81837ef847a0fe91b0af07350fe8b05799b76e6c6dbe86d55c36e2d321d4202a7de72ba33c129f1f288d4f42ab9593ff1d03
-
SSDEEP
768:VgGzpDAp9JXYxOgv5Wrirs53eYvxlJX7H0cpAAsG/NPVbIuZUg:GGFspw09XLjAAFFuuZUg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2196 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2196 AcroRd32.exe 2196 AcroRd32.exe 2196 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c94121275896b6d921bacf0ae94c9f7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5eed8028ff9103d798c70b5b50c547ed9
SHA176617eaa7259b5e82ee5f8eaf86bbc36317e45db
SHA2568ed169a4dd1ec989682136a387dfa68facd8c064a9db5d182ec68b83288106a3
SHA51264171251a15150cb23b663c3e3fb02e904e5b5c7d7c77a170c274e38efd1de1ed38dfb95473168f6785d9a0a1d3b86d7f09fbfdd46b5acf1ebf48501d5142fbf