Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
30/05/2024, 13:43
Behavioral task
behavioral1
Sample
845bd3ccc50d6ca5c43d462d8556ff1f_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
845bd3ccc50d6ca5c43d462d8556ff1f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 845bd3ccc50d6ca5c43d462d8556ff1f_JaffaCakes118.pdf
- Size 107KB
- Sample240530-q1ntcsbf83
- SHA256 57427b17156ac9af369406571a70e7e4c417586c0c6370c6d8c89bb72e223283
- MD5 845bd3ccc50d6ca5c43d462d8556ff1f
- SHA1 f0e7c2de9cd147ec64417d3f2188640012bc1470
- SHA512 72deffd06f9532a1d8644f5b081190a690a5a4af6a0277e4e22baf47e78dea3ba2abdef44f51262531c2901c3d4052ba28aeb9612540a8d46aa99ccf9fc870f5
- SSDEEP 1536:rXFZmGWSO96+v1whru5gChZ+5ntQmgQzDu41J1dU6gHssDIcwpv2mhszIXlQS5X2:LysODuruaOZ+5tXgQVqMIIFd2m/d52n
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2236 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2236 AcroRd32.exe 2236 AcroRd32.exe 2236 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\845bd3ccc50d6ca5c43d462d8556ff1f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2236
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 cddb2df6338772867e67c0cc30448b55daebfd99e9dec53f45b40ac02629acba
- MD5 f066b6f1bc3278dac243d90020a182f7
- SHA1 6ea22d74d626221890ee519ccba8b5fe6a50832f
- SHA512 24bdc9018180d607753793b77f018ad408d561b9cf06ade3ca909965cac131c0d3ca4ea2a15c2d904cbb945ebef4c6285d08cde34abf355889b4fef425f4d171
- MD5 SHA1 SHA512