Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 01:01
Behavioral task
behavioral1
Sample
693958c3426353c51e31610ab39e981c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
693958c3426353c51e31610ab39e981c_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
693958c3426353c51e31610ab39e981c_JaffaCakes118.pdf
-
Size
44KB
-
MD5
693958c3426353c51e31610ab39e981c
-
SHA1
0a36858c7df4098838546d21d01a41fd13d74b79
-
SHA256
5ef6b76a1c1ec47f92214c226f4f7bbf7cad4caaa1ebcbeed2742c6fc854eed5
-
SHA512
7731e441a3847c6be0faaf8f6f8a7bd4e2930df8797606e8bd9842dbb9dbca68ccc569d270f67452a897211cc84d25e2fd349b638dc65e60247f640cbfe6ff76
-
SSDEEP
768:bgGzpDgp4qSPZ9ENOh/hvSDVIrM6IvrVmvj1u+FuWEzFawWJvkY2OazDvZ3RqLCA:kGFEp4qWZ9htbr1PFuWEowWirZE2FoGc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2132 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2132 AcroRd32.exe 2132 AcroRd32.exe 2132 AcroRd32.exe 2132 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\693958c3426353c51e31610ab39e981c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD593b23821faf1b30bfaaabb6f8b946f6b
SHA1464a7d83c979fd58183c09e55553f2f78eb84dcc
SHA256a63f271db01841948541cd8adb9707fafdbed471aa37cf554bde2a603b85f430
SHA51285dd98ee0a23c7e1a75d8088a2a4e97728a99c9d5a44f5358d79ee2a456c36ede63997aa869355828be3505dff8b445ed969db0a1cc324d31e43236ca6b4b146