Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 19:22
Behavioral task
behavioral1
Sample
64788db38bb43293de25ab5bbfe3b992_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
64788db38bb43293de25ab5bbfe3b992_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
64788db38bb43293de25ab5bbfe3b992_JaffaCakes118.pdf
-
Size
37KB
-
MD5
64788db38bb43293de25ab5bbfe3b992
-
SHA1
f42b78f9c0b54fa17b3768949288348d3b2e66cd
-
SHA256
aa464633c2e099516dd79b62e67d5c809bfd6e37dc462a332532fb58050d3acf
-
SHA512
9dfd419d174630f0b600a842f7d773078bf42a9054a0e6459c810d35e98d546ddded2a5484efe1a432a84f0e4c8925f39a588b8ccda9a174824cb9941b1ab8b6
-
SSDEEP
768:YXuMZmwgCLWarkCYjhy2StbeQXXScWv4jLd+Tl10PLV9u4pqR8:YXFZmGWSryy2S5XCkjLd+T4PpE4pw8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2552 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2552 AcroRd32.exe 2552 AcroRd32.exe 2552 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\64788db38bb43293de25ab5bbfe3b992_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD57b675733189b400ecf5d29ca5de0493f
SHA1a643a4bf9b4667cbfd8763855a3af326eb06945f
SHA2567a59ff1bf666bbeb9a54ebe10dc29e8050854ee343a3d56056a06542d405875c
SHA512740baee466221f533063c54947042118a09981ba93bb0829e7a307cb60a0ceec62d129d67498cd803fc99a2867301fa0e068518fa53abe03541ca12d07ade6b1