Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 03:36
Behavioral task
behavioral1
Sample
65df8b83f5fce4ffde9bc351ba693e40_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
65df8b83f5fce4ffde9bc351ba693e40_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
65df8b83f5fce4ffde9bc351ba693e40_JaffaCakes118.pdf
-
Size
43KB
-
MD5
65df8b83f5fce4ffde9bc351ba693e40
-
SHA1
be10595d666401af5620c0686adf0d94c669b848
-
SHA256
d3248beac29526b4f6b8a55b23fed975fcef889b590dc29fc5cef441be16cfb5
-
SHA512
4194bac64e846b280c852355de53571a2bcb501f3bc7e9fad8ff0a53f5cab3a006e33167b7eef0c54119b0af33d32eac9774e5cf4810718414c441d30a2f3312
-
SSDEEP
768:kgGzpDSa1EcOVgZzHNM6/rwF8CwbGcWaR5iffDvWOLG9DiZTJ7QAoziRuKMCj0Dx:RGF/13ifayDuiGpirQxzi4CADosdo+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2460 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2460 AcroRd32.exe 2460 AcroRd32.exe 2460 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65df8b83f5fce4ffde9bc351ba693e40_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2460
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d7b9d740ce9e3069eca120fde3779f04
SHA1b71abfe876d02096e0d0390a6c2795cb0191d4ba
SHA256e1a40f805b3ec2881839178df112fb25b258aabfc66a5cf9d0419840cda744fb
SHA5127ac80c8a149ed12369b90a09e28629d4f6689ddddab52ead3a33e0c8f98553dd16f91d49d27b61069af3abd9bbc3502a6f88f78990d5876a648bf2fdf6e76b31