Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18-05-2024 07:56
Behavioral task
behavioral1
Sample
53b61488e01b258c79c0d9404e0e3fb5_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
53b61488e01b258c79c0d9404e0e3fb5_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
53b61488e01b258c79c0d9404e0e3fb5_JaffaCakes118.pdf
-
Size
15KB
-
MD5
53b61488e01b258c79c0d9404e0e3fb5
-
SHA1
2853752fdb88002ce454c35c6309ee826660108b
-
SHA256
cf1e60ed2ad3d478ab21c0fad33ee00764b3e1b23cdd3ee393bbd62587ddefcd
-
SHA512
da95838aadbe66f10c11e13b66ad500b6fbf662ecd4c46763b1a0a9e4da469ded89825781c14105b24a7bff1a79db71d232f52a785715e8b412b1604af40d162
-
SSDEEP
384:eqOmEaeQMJipebhWFAF+UjB7+gGt5nkQL/jcP+F:fBYJs+hlF+Q7+Dhk8/oWF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53b61488e01b258c79c0d9404e0e3fb5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD58cd42fda0b9c54b0a35d89944c3a37d3
SHA1473e0b9f46c2db1e7b0bf158270365d2f5dc1a55
SHA2562d5dfa6905fdc6576b31094aa7a25dce96afe59c1495f8b55516120297a2e10f
SHA512676dd3157b928093b5c6a6560ccf2b433f3f3d23cbd6717c8c2f354a53642b095017571971c004247fb67b25154c26b71d7d82ef8efdeb23251b895d2854fcef