Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:08
Behavioral task
behavioral1
Sample
6966a98af4aea6b89475f978feab0d6b_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6966a98af4aea6b89475f978feab0d6b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
6966a98af4aea6b89475f978feab0d6b_JaffaCakes118.pdf
-
Size
36KB
-
MD5
6966a98af4aea6b89475f978feab0d6b
-
SHA1
7d182c987dade392fe41d51e61cea488a2cbc325
-
SHA256
0116062abb8cd583b62272d895d2408a6c5f018efc4876757a659c99fe4c3722
-
SHA512
86c74c4ac8f6459a085e0702b9eafe136395ffc70fdd3dc3112ec9cbaf7ad9e62f60d6f06fb0844b8dc66691c63f92a805aef6fd9975f085b16a8f42de71366d
-
SSDEEP
768:oCXuMZmwgCLWarvcity9ALlfztLBfyagKOvApGlPEMoCryK1aBT0Dx:FXFZmGWSNPLdtLtyagKOvApGlP5b/wB8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2908 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2908 AcroRd32.exe 2908 AcroRd32.exe 2908 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6966a98af4aea6b89475f978feab0d6b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2908
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ac475a42ad18fdd18363e7ba7030d8f1
SHA13f4777b37e115778cfe5fe8afa8e04483768d037
SHA2568da73895e36e16f8b26236a0dcbe180a377f95f2bc5216d0ed4f09e1d289181c
SHA512b5338ea0c7cbca7341d75ebea99b0e6d41335be8160460e62cb447096cc54df4466dd5118ac0e3fec399666439bcf009c7c4c59f7d5fde56d38da5ea649bf46a