Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
02/06/2024, 07:01
Behavioral task
behavioral1
Sample
8d3f0c6f3b96a80787b5213ec085a92d_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8d3f0c6f3b96a80787b5213ec085a92d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8d3f0c6f3b96a80787b5213ec085a92d_JaffaCakes118.pdf
-
Size
43KB
-
MD5
8d3f0c6f3b96a80787b5213ec085a92d
-
SHA1
6ada560bbc10a28af7fe6b9397afdc1d8a9f78fe
-
SHA256
9b09beacd7cbf178134fb535894175fb4469daf976d1557faeaaf5b1aaedba5d
-
SHA512
d681a7debaa03e21ff454c4cca3a24d66da61651108f1bee20c19c3e812dd20beba7bf698f2cc4c9fc6e169bf7c944b775bccc297f4f5f1562fde4ba458c0b42
-
SSDEEP
768:sXuMZmwgCLWariUE5Hpu7VxDoc2/opRHwexundTOygRZHaLfZohKgAoOWirXgic9:sXFZmGWSiN87VxDoc2/opRQexundTOyI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2748 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2748 AcroRd32.exe 2748 AcroRd32.exe 2748 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d3f0c6f3b96a80787b5213ec085a92d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2748
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59c5d0fca38d8a5319e745e623610ae9e
SHA1551434e48cc07fa63fba5e0bf4323d49065c4fe2
SHA2565e6e8b64b56e98917576a22b9e95f7305cc70db8d9ce7b2c1842a6a0cb3fac94
SHA5123d8cf100752ebec42eb81f384301f41cc4e9a8f086b2bbf44db5960c503a80f6dc1d221e26d5a96fa1195b28b812dbf9e10871e4ed001d3bdc6e5ee8c18a27e1