Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 02:35
Behavioral task
behavioral1
Sample
65b6333946992c6fabe508c70cf5e98d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65b6333946992c6fabe508c70cf5e98d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
65b6333946992c6fabe508c70cf5e98d_JaffaCakes118.pdf
-
Size
44KB
-
MD5
65b6333946992c6fabe508c70cf5e98d
-
SHA1
dfbd809a58e77fdb5aa1fc1408be3ffde9865304
-
SHA256
a8778513b6b59edb32beef1a2f322843776b0552054e8ba7cefbd4da57ba3291
-
SHA512
c7d4bf3714963b91c76dfc7702b2108d85b71db1221823bc8515331838b1b0c545b56661e771720e242b6824c6a7d415a065404b5b53ab02a99b3ca3ce33d1c4
-
SSDEEP
768:OgGzpDyBVksi8yeXNC6245TBdUSpTtSc7Bg0tpLgXETnaSuhoki6xuXH:rGFmNplQXETSoXuuXH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1548 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1548 AcroRd32.exe 1548 AcroRd32.exe 1548 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65b6333946992c6fabe508c70cf5e98d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5d83e5430a948761e4c5f6c2fcd62dd5f
SHA1c0b3748ea9fb2dce9a0ba816d24e8290b737e785
SHA2569d6fe3ca34859b03af47950c19f6daa94f72f8e190aff2a73e04c9e2fa64820a
SHA51245eb1de646597c4c7a0d72b75c156b40a37122f3ec69f15db5507d731a222e5b7a30000039de2d917812890e3c0c485c6107c20701e0a6a5f76feb6a07f80c1b