Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 11:38
Behavioral task
behavioral1
Sample
8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf
-
Size
18KB
-
MD5
8a5aca9f367b5b661f03f20b1e3634dd
-
SHA1
ff11c797981509caa059b4ab17b46c1d095084c5
-
SHA256
55299b01c1d25c3f9bd8eeb5c2feae48d3e4fcd4b86adb1fbca4aea200899ee4
-
SHA512
e8ef64d3480edc56a9361e996caef446a1d2eb0fc7b3e65638e096b3033af5c30821e8e083056f9c62601628e06704919bff5e095f5969ff8ca18e448cefb3af
-
SSDEEP
384:VzrdG0Hz1T1G6o0Ta6MKeSyoD6iQAKUu6ju2+rovlddK+uUYCBchIb+fmY+ByHIh:VzrdvHz1TY6oGsLdNN17yuPrAd/736mV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1676 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a5aca9f367b5b661f03f20b1e3634dd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1676
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bb83e35e05170fe287efba983a329fe4
SHA195da91e5ee4345f62a0cf576b332f2e0a0e6cde6
SHA25687f052375c00f43f459edd4f43cdfee55f776840733fe3ebf10c2c162e45d4d2
SHA5126abfebaa496f15c710f771b4880344c278736fd37146fee4bda4b238103219719ba3c923071f4b21fdb0426b52ed54e2ac168e84b01d4e98f196e89d7430e5fd