Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 18:16
Behavioral task
behavioral1
Sample
6bd5fdb2e37ed202e2ec3c67bef4b5bf_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6bd5fdb2e37ed202e2ec3c67bef4b5bf_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
6bd5fdb2e37ed202e2ec3c67bef4b5bf_JaffaCakes118.pdf
-
Size
32KB
-
MD5
6bd5fdb2e37ed202e2ec3c67bef4b5bf
-
SHA1
ff0349c36df3fcbd317a6844d4788e0bac79190c
-
SHA256
09e695107fc3c8b264b381a53455eadbff89487b3bc8f5ceb48b9aa2ed88964e
-
SHA512
c3a63af303919075b4291ce83b6c960028c548020dea8d9a8932e5252d05f6c96c6adc561f2e939af4711e16ae897d2931d40eefc026293a2546030bcd92c5ce
-
SSDEEP
768:fXuMZmwgCLWarKjPB8AHqolc6+hlxR590Ay1WDyJq:fXFZmGWSWpjqolclD5Ry18yJq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6bd5fdb2e37ed202e2ec3c67bef4b5bf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5d5a1f3b5451bdd99e2b55bccefe6b109
SHA1a84bc52c34f210228899608456ab91b0b7c8b4b4
SHA25627a2406cf1479d6d4d3987e110135775fd8f2fca6a824cc1ae5922f31e351fbc
SHA512932aadc9e83ecd510b3c9d6a0d79880e276a1390d0537ea02c8c17970fd5368b7c45f24506e696aa1040d904e587e88cc9e216f869a5c7db34739a95a93238bf