Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 23:25
Behavioral task
behavioral1
Sample
8543eb906f0bb132384d8166e5b6169e_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8543eb906f0bb132384d8166e5b6169e_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8543eb906f0bb132384d8166e5b6169e_JaffaCakes118.pdf
-
Size
44KB
-
MD5
8543eb906f0bb132384d8166e5b6169e
-
SHA1
c143ba8e298c9a22cd7418c09f7fcdb523b58650
-
SHA256
b94f9e81230029ce8f0f7b7cda32f67532cede101f28bbf0e303fe3b8c388e74
-
SHA512
bb04e6527ce4659fc6a16c8ca23dfb3417c3f6d0341af6e1a1699d8a3f702cd9c1d9753dcfee278e9f23702ee59b4f668c01f0ed1d05d811ff6a473401732791
-
SSDEEP
768:N0gGzpDyBVksi8jatt6P+J8Ks1JnxHk8di+BeWGW4xt27nJhs9rYKMvVpGWF0CyP:bGFmsFsBp3LJhs98bG+TyrAI6033
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1660 AcroRd32.exe 1660 AcroRd32.exe 1660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8543eb906f0bb132384d8166e5b6169e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD555706c0cea80e2a467454f0c06ca40a2
SHA18efe0b9c6923c5e7ef73ec8c0808cc7d69cc4813
SHA256f1ab003c0dadb622fe01bbe8962fc41a16c671e1a30007c0be1805f389806a64
SHA512e6c77f60461f02595a40acc1d217fff7f6cfdcac74aed1b63ff9017552f58429a0e8187babdeffc3e61d7e27075d33aec48977803454df36ee08a1f064c37748