Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 02:21
Behavioral task
behavioral1
Sample
65ab27c4fc953fda5495f9ccd8816373_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
65ab27c4fc953fda5495f9ccd8816373_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
65ab27c4fc953fda5495f9ccd8816373_JaffaCakes118.pdf
-
Size
32KB
-
MD5
65ab27c4fc953fda5495f9ccd8816373
-
SHA1
48cf102dc6d5912bf028d9b74096bd8320020deb
-
SHA256
a638359df129df8b1f97fee0f66b15781a984ecd836d27d3eb83ae94768cb7f2
-
SHA512
afed323325da4417b620950c1157a59433b69f76b9592757256c655b58375c23b39742659de35d9d2ba45c93b7399615586e0989a0567afea923a4836c1018cb
-
SSDEEP
768:IyP1cOXI9pWs0g2WAKT2X1YaVoVxiV1BPw5vtNykz7e/E5vXuMZmwgCLWar+znr:IyPO6eWs09WAU2X1YsoVxiV1BPgtsWCv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2248 AcroRd32.exe 2248 AcroRd32.exe 2248 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65ab27c4fc953fda5495f9ccd8816373_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD50267c361995eed8b35e1b7e244e00714
SHA1d2eccf4bfc5448b04131a0389e8b4af19541ff83
SHA256f68f705776da4204c6cde052fcc8d14dccc6582a97e19c252d9c9dcea653881e
SHA512d83fe9d61737fc5d07392b40a689fea5f0b6fc96c66fd5d07a43985eda656be9b9d67462597813eda93f0fe30584960818fc7746dd4201277473e5be6676396a