Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
19/05/2024, 23:17
Behavioral task
behavioral1
Sample
5bfdc3e30881f8dd6d965fb6529d6c6e_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5bfdc3e30881f8dd6d965fb6529d6c6e_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
5bfdc3e30881f8dd6d965fb6529d6c6e_JaffaCakes118.pdf
-
Size
50KB
-
MD5
5bfdc3e30881f8dd6d965fb6529d6c6e
-
SHA1
37aee3bea4236cffd2ab1f0785522cd368f50176
-
SHA256
ab08c8a637af91f6cf9e2429229fcc8c2d446abeab26698dae21f6ae0c707ee6
-
SHA512
17944a54c16dc86569917d0e116dc668a93fd6a955c402fc66bda801371267316e2851d0a763d1b0c0076b97ef57c1d50497ad6da32b6304b053bd0f083d3cae
-
SSDEEP
1536:bGFoL/ZFC/z+xLtG9mXcVx64sUIY9gDiLZ:6Fo67+x8IMv649ZmDa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2348 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2348 AcroRd32.exe 2348 AcroRd32.exe 2348 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bfdc3e30881f8dd6d965fb6529d6c6e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2348
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c69aa437ca49d170914622424c9a440f
SHA17fe569d846d4fe4d1b2245d305a920ca4d88b8f9
SHA256aac5fe2ffcc937286402b43b60110d372550b5b652d95d279da82f0ece17ce3e
SHA5121203db76be7bc738474a2d9adf9e95c4e10f303365e9d7d4c722db1e3a8e2e0b7172c51c344dcc4b4cb329d643d73bb7cccd19b24121700a8c56d7f3542d37eb