Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 16:05
Behavioral task
behavioral1
Sample
7d8e26b6838d84fb52e700f4f6c8fa31_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7d8e26b6838d84fb52e700f4f6c8fa31_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
7d8e26b6838d84fb52e700f4f6c8fa31_JaffaCakes118.pdf
-
Size
55KB
-
MD5
7d8e26b6838d84fb52e700f4f6c8fa31
-
SHA1
a5873984f3c12d5e60859bbccfe778c9df830fd4
-
SHA256
30ee1e1806d92cfa5f85262ee0ac8a0cfa5a531800a1d32c7ac052cca29ce991
-
SHA512
6a2529f4f8f8a5982055212c07044570a0910c05a2cdf99b5f6792445325b2e313aa0037685f62497ec700b8742a8b97ee37cb1e9847c9b0d33bb04b35724c32
-
SSDEEP
1536:tGFFpogngsWinHt/rZXg6MgGe+EZKPW3zmWfGQ:wFFp/aSN/0Z3EMPAH9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2832 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2832 AcroRd32.exe 2832 AcroRd32.exe 2832 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7d8e26b6838d84fb52e700f4f6c8fa31_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2832
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e2e72564b8921f6e586883ca71fbba13
SHA11ba7031d89cf555910e3edd17a761e52e1405c61
SHA2560c2fd015fbfe37874bff49115805bf6da8e1c15a10842829381771bdee915136
SHA512a95640236de17a90f75ad572f73aea8f8aff2487a654064284ff00b56177ecc20e95fd00fb4ffd1e67936d4d36d54a7ffd13848dee558c85c35ed11a2955e880