Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 19:55
Behavioral task
behavioral1
Sample
5137bd032ac5761e93b9637ea7cdcd63_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5137bd032ac5761e93b9637ea7cdcd63_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
5137bd032ac5761e93b9637ea7cdcd63_JaffaCakes118.pdf
-
Size
72KB
-
MD5
5137bd032ac5761e93b9637ea7cdcd63
-
SHA1
cd0d6c91384b9e83c38c39ea9ef180d0c4a41e28
-
SHA256
8ca9ea931d0f3171fc7e0979d16d93eaea4b3aecdeeff5ffc6ab0655f90b19e5
-
SHA512
4915d5a477fa7d5ef7e25a88c3dec7a3335963a324c012880f17fa34f7671969afef718db5d6cb42d1b965f1d7e5a1d767592ee5e0732a04bd5ebf0e5b28e033
-
SSDEEP
1536:eGFmtzurfYpl1MvQJKzzFpC8GWHKE8O2yzWjk0HkE:HFmtzurf6aCgZOEaymv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5137bd032ac5761e93b9637ea7cdcd63_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55df59744bb7e91e1a5cbdc8ffa2030f4
SHA14f27c81cc90fe1e846cd1594370307b721930664
SHA256562b21643cc0f5893d30d32fd458a9dfc3445531f2b5a572718351ac8341ecb9
SHA512dc352df3c5503e503f61e5c09da59a528cf57662ddf71014cebdbd739d7d780dc7c82b1e913a01c0e939557c898fdd0b995aa2ba1ab2455e830f051cdaa5db8b