Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:45
Behavioral task
behavioral1
Sample
692ff3eb9fae3b3c5d57d5ec082ff3c0_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
692ff3eb9fae3b3c5d57d5ec082ff3c0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
692ff3eb9fae3b3c5d57d5ec082ff3c0_JaffaCakes118.pdf
-
Size
42KB
-
MD5
692ff3eb9fae3b3c5d57d5ec082ff3c0
-
SHA1
b5a4f450f5616c1df6d525ef3f2313fd930464a3
-
SHA256
221c925ddead00a09c22809556376024119da67bb965202736b5c15828de8d24
-
SHA512
45ee3965dc1d1c49b33df5e4c4a6708785315c36cba3d3f00371f8432e9e6cfabd0027dd6020d5beac50ce403a9d52b551d37c189575561b32ac7eb3859ee6ac
-
SSDEEP
768:JgGzpDI/C65FIC5US0oHAK2YYD2g8FFgPoiXMcocnp+Z9ULZTEuo/3eJURR:qGFc/YSUQYDVBFnpHZTi/3eJURR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1964 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1964 AcroRd32.exe 1964 AcroRd32.exe 1964 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\692ff3eb9fae3b3c5d57d5ec082ff3c0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1964
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bd7c776653fa564689c17d8dd289c9ce
SHA1472b699137d86aaae5caeb1cfb27814f5833714f
SHA2560af63e3301cedb9c8094f43056cdcbbc9878030c9bc61c2c0fff4fbb2dfc1525
SHA51257bc346c77a26c71820c6db9afa4f5cdebfb7a6f6951f9870dfbc8a28aa97887758507c5a17efccb5ca894180f65a6eab53921fdf5de2b03ead027a842affc2d