Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 10:19
Behavioral task
behavioral1
Sample
66ecfd35ed5c96b9f01859406d888288_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66ecfd35ed5c96b9f01859406d888288_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
66ecfd35ed5c96b9f01859406d888288_JaffaCakes118.pdf
-
Size
36KB
-
MD5
66ecfd35ed5c96b9f01859406d888288
-
SHA1
49c3f879ea1c99cbe31203e2f312f74ee32244dc
-
SHA256
23aa251443026e1ae4c0e48808b93c2cb1e9be35ea731a333a9bb159d3c3ea62
-
SHA512
3a75ead1e74d0c07178d32171a48c6ab69ba802240de1ba17ac8bf6a139a89364087a8b907984aeaa49eb0481f4bf7c8ecf654985ceee6a2f2283428ee5123e5
-
SSDEEP
768:CJiQGzPXour39Xevh/6Cd8RDcX9CxcxqzJHV6NV+f2764:MJGzPXR3ovhiCCRIAxcxqzL6Tm2764
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1936 AcroRd32.exe 1936 AcroRd32.exe 1936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66ecfd35ed5c96b9f01859406d888288_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5933a3c531b1e21e7fe8aa5a51c2f5213
SHA1559dc5ebe8b7d5d0d29441e8a1660e0a0e0792a4
SHA256a7d808b7f6e1fd08bd6e5c5cee32a32ef20f35e75b614da4e4cd0ae6309e8477
SHA5122a41f1723f6e2f7fb3a4dd28a5e379dbc55f0a69b262787cc45c24b9c7cbffcdf29c8594898ccf54dc2d7cda0da7246b4b6140027f2e07e02563b9fee3209cb8