Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
01-06-2024 09:33
Behavioral task
behavioral1
Sample
8a0de1f2696ba2ece3df1b0660fd67b8_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8a0de1f2696ba2ece3df1b0660fd67b8_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
8a0de1f2696ba2ece3df1b0660fd67b8_JaffaCakes118.pdf
-
Size
32KB
-
MD5
8a0de1f2696ba2ece3df1b0660fd67b8
-
SHA1
9977a1eaed7629e57225f208789e63b091a48ffa
-
SHA256
8689b42311e44f78d1dcb7b3fc31d62833b252412cc673baf433b4be732225b2
-
SHA512
8671cf5b7a16bb5684f5c38366948dda1662699efd054eb69bce9e2b1c483c3eabd9e3c37c6a8cf9ddb1d53c15610d634b0282a45fa6075acf49522336c42392
-
SSDEEP
768:IgGzpDrpa/ILwyH0VR/KnNTNKdphENSEXSewmZH/FvbFtTFa3ktu:FGF3paPphEN1ieRZH/9FtTFa3ktu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1008 AcroRd32.exe 1008 AcroRd32.exe 1008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a0de1f2696ba2ece3df1b0660fd67b8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD554bc5633825b27ddc4dc114afa7921c1
SHA1eb7e5d22769af66b635e8ae4afeeea3c891b795a
SHA256ec43fe8e68e9b4a26dcafea171142fbb19f578df2f578ba6315a053e7a7b393f
SHA51279c55b4ad0d77a8a2048f10df3935f9f5e7692d33e3e78afa97858bf0fbc55d0b46068621da5db031c9188a2f168ea8987b21e7adf56a71317e86bbe83033299