Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
18-05-2024 10:53
Behavioral task
behavioral1
Sample
545481de5124db3daf364a9da3c9fb12_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
545481de5124db3daf364a9da3c9fb12_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
545481de5124db3daf364a9da3c9fb12_JaffaCakes118.pdf
-
Size
16KB
-
MD5
545481de5124db3daf364a9da3c9fb12
-
SHA1
736ebe735402ee0043d40c1c0f077156debe12ca
-
SHA256
67eaf71240699c2c4e8c5bb9bf1a4820cc0a126376fc3ff040972b471341a038
-
SHA512
53b177e88ef4fb5882f9fed4407737dba6ecff473edf9b65bc18bd91314b1afe4c6ecf2995be3149f0bbbe8df90d2750790d40dc00c0682fa7996bc827326436
-
SSDEEP
384:diGYikFZRFuBCM46ResxaroI7CC/0x2iMKW+PVSbvMm:ZYt9Yn46ResxaroFC8x2CevF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1900 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1900 AcroRd32.exe 1900 AcroRd32.exe 1900 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\545481de5124db3daf364a9da3c9fb12_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD50fb616532ebe49ef5100aaea6abb285a
SHA101cc2c566b5583833437c44b647b392f71a5a78a
SHA256727a0d871c874c7ecef8a418ae0ca1066778ae8b5d94b017989a51b5510a0b93
SHA51220f0fc5e481af608e3aac84fa046e25a33cf52b0031d3e63b1a40bd01aaa64ef080fa2c510a5caaa20bee70ecd739b437bad2ebbaf842ebf63867d873ccf1b6f
-
memory/1900-0-0x0000000002AD0000-0x0000000002B46000-memory.dmpFilesize
472KB