Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:29
Behavioral task
behavioral1
Sample
69254b136177ab8e9be5c3c0445808e1_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
69254b136177ab8e9be5c3c0445808e1_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
69254b136177ab8e9be5c3c0445808e1_JaffaCakes118.pdf
-
Size
49KB
-
MD5
69254b136177ab8e9be5c3c0445808e1
-
SHA1
0fda03847f8f60ce0fd90131fda6fab811038a61
-
SHA256
da3bd406048c44e56fa4c58983bb16c6df851c0052656bea327aef2d45843832
-
SHA512
259a229537c37e12a9a04923a5aee413166325e534a46eff382d74a4042a3cdf729a125636bf4290592a9285655b8fec4adaef87547a5a6531435b18e206c4fc
-
SSDEEP
768:zzgGzpDDsUcUhB3omFqdV3L1ttQFT3vzAKp1RFfL2JY7oVNpnaXWEq0YkNAaTewX:IGFPZFT3vzhhcY6Er3NnKAUKJtz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2836 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2836 AcroRd32.exe 2836 AcroRd32.exe 2836 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69254b136177ab8e9be5c3c0445808e1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2836
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50b4c9366fac90b28ee819d5aa0534b20
SHA18a921de9c1b825790d6f19a205478fd462a47141
SHA256e7016de418e9b4193e29b8a3605c49941786ced65fa8012d9c083b06159bb3b8
SHA5129e44281938a559a8624d6ac6a9487235d6f377352f79c7bed9721f8c55aa4875ae919fbfa8213258cae23a1736382c3cd4d66fbb6d2a000a253549a1c91ec4e0