Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 09:53
Behavioral task
behavioral1
Sample
66dba59f9f9c6f6c850582580375bbe0_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
66dba59f9f9c6f6c850582580375bbe0_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
66dba59f9f9c6f6c850582580375bbe0_JaffaCakes118.pdf
-
Size
48KB
-
MD5
66dba59f9f9c6f6c850582580375bbe0
-
SHA1
61c5551a684d95a216d08fa454048f775e2ac225
-
SHA256
d27486811dbb7f319c2a43e956c3efdbf704b28e1ee730f410f0689ae64aaf7e
-
SHA512
2791ba3e28a115d9219a78948734ef9f061495e8cb1ba972988e6f7d2a6c7df27a22dd87ab6f7f13e12dd33ab03578df1e10165999fb4b531e9627e0bac0fed6
-
SSDEEP
1536:CyFVSWKAW12PNVJGmmOuNDQ4auFJ28JpbN1o/YLTZ+nLxVeoV4DIzKSpGylC0zbA:vvSWKA+0PEtJO3u8gtTKKd0FVZVyIzKX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2860 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2860 AcroRd32.exe 2860 AcroRd32.exe 2860 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66dba59f9f9c6f6c850582580375bbe0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2860
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59968a5dc62a6e19a9f74ef99850e5e62
SHA1e295990c4912a57393d2caeb0857cba050c6731f
SHA2563793a0c259c5157ad972b17aa323a680d89f0c7d4796a4b21ce3ab941d7b1920
SHA5123e5f864995663250630e3ef7dafbbb5ec00a2bd0152c119005b0c04961f7fa74ab96548f0b538ce736cfe40f668cb1f816d1c00fb0ab72e49ac85dd968b74ad1