Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 22:15
Behavioral task
behavioral1
Sample
92c9e72b45ba029015274c2cc6f8ae9a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
92c9e72b45ba029015274c2cc6f8ae9a_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
92c9e72b45ba029015274c2cc6f8ae9a_JaffaCakes118.pdf
-
Size
40KB
-
MD5
92c9e72b45ba029015274c2cc6f8ae9a
-
SHA1
e3437ef0c82925a7de3f35d839102045ad8f1e68
-
SHA256
7cc10c08969efa1661c63aad061001c9efa229f13d9ea84ccb5d682ffe69561d
-
SHA512
b2f280a1a372514b5ddbc353be7af4771edafc160c065b34d6753c1a3fd998fe18bb22919b521caeac524814738bc92140bfb1c40831b0054b6d36a7adfd7072
-
SSDEEP
768:fXuMZmwgCLWarcE5Hpx45geRkTQuCQm91+LN9j4rQq5AWRB/rh1ZOn:fXFZmGWSFj45geRkTQr91+p6MqasB/rG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2796 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2796 AcroRd32.exe 2796 AcroRd32.exe 2796 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\92c9e72b45ba029015274c2cc6f8ae9a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2796
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD586fb052cb0b3fb54fe7f5e946f0268ae
SHA11b9d691320a130329f2b96d6ae402215da1206ae
SHA25619d719fa66cb8a882721a7489f46c688a10bc187917959b8ea2de27a22c4741c
SHA512261ecc893015247968d5b99316a3997ba98cf398bfb478e5e0863ebd7fbfff7edfdbf9c851819b3158bbc97443b20cb3a1c42492479e1472d9c1fbff9d2cb891