Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 23:44
Behavioral task
behavioral1
Sample
6909cc30b586821b7bc89f232fcc250e_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6909cc30b586821b7bc89f232fcc250e_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
6909cc30b586821b7bc89f232fcc250e_JaffaCakes118.pdf
-
Size
35KB
-
MD5
6909cc30b586821b7bc89f232fcc250e
-
SHA1
e068855c9f79b443ae35b9761e8ea182ca43af27
-
SHA256
cfa57f8c7e5cfff282dc39e6ec7efe3308b1c434e4923cd448a51554b8a6218a
-
SHA512
b3e0fe2ca324b53d29fe39dc6cf2777fae43e2221a34ae17e389bea5ab4358412a2765902d7d2030c10c2d9917becf5dcbe51c374f2f315d2585c61db5c343f1
-
SSDEEP
768:3GgGzpDIevKazPah1S/ZxlaLiz1CCLM+bJ8YUaTypg7n8p:3TGFseu21TLM0J8akgQp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1960 AcroRd32.exe 1960 AcroRd32.exe 1960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6909cc30b586821b7bc89f232fcc250e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59bcd9be9b4a375153bd72d6d9a56eee7
SHA1e3ded31340563924d815f7bd4ddd82d0f8b622b4
SHA256febab1768b065563d096ff7b81c29fb2872a357f6978af3ab7d7ac0edb03b0b4
SHA51239ee0d0986e8af693feffc3b1793cde943194d4b565044f84dfb3c380c33e749bd081fa0bf4b858400f93a9c6c6fd5b4b55f6142d513ad4982ce33520ff2cea4