Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 14:37
Behavioral task
behavioral1
Sample
8ac47530e2f0d5f9f689f8584c0343c7_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ac47530e2f0d5f9f689f8584c0343c7_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8ac47530e2f0d5f9f689f8584c0343c7_JaffaCakes118.pdf
-
Size
47KB
-
MD5
8ac47530e2f0d5f9f689f8584c0343c7
-
SHA1
bbec7a5d6bcb8206228b50989498d16223aed0e7
-
SHA256
ba8a8d410f82e455130dd26e7efd8eb24ebc63c632d36dcdd884a3628c0ebdd9
-
SHA512
29b5cc344271b562499491d1d444109b2ed4b4e8f94c5d093e7750e5273b20ebc262497819310a4e4bb498d59231ab663de5631d359f90c5c36eb5a5c8562681
-
SSDEEP
768:kgGzpD+p5drZN5r1t6GiTgBNHrO2D3+NW0/y47OL3/6vep78embQYI8P8Kk5T/m2:RGFKpHt6GTHrL7+Nh/3iL3Ge+2YrP8K4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ac47530e2f0d5f9f689f8584c0343c7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a30755ef75302511f419b07fbc403ec1
SHA14099308c5bd401a438bcf85f2258e910cd3369d5
SHA2567f4d2ae162b96b28b1b67a3c244f3d43bf306f40ccc1f528f26653dcc953b1d8
SHA512b8d076392b822836d7db91a3ec97267283d83ef0b60baa567f39cf31002aefe9829c5b225e0c3baee726650b5991eda9eed0fd503c8d5eb5fbc5647e23d8bb25