Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 02:42
Behavioral task
behavioral1
Sample
904908c27d2f7b0d8e7f01072177cbcd_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
904908c27d2f7b0d8e7f01072177cbcd_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
904908c27d2f7b0d8e7f01072177cbcd_JaffaCakes118.pdf
-
Size
38KB
-
MD5
904908c27d2f7b0d8e7f01072177cbcd
-
SHA1
64653bc8fce1188ebf6717dcdc098d591352c121
-
SHA256
3b501590abc5bb86deef934c5a719706333508307bd2e532f7c68960908d29ce
-
SHA512
a6661b23de944479b275f228d1cdc54c1090d9548fc60eae14fc2a694a191db3a7e887528afcc0583cf40b39337d49498bb8fa355fa4b229f825a8dab0645194
-
SSDEEP
768:0gGzpD8C92yrqmKXISiSGJpnfenl9AkzH5bfkwjgK0h14Zq96D+UNjWMnPBpbwnp:BGFgqnfenl9AQHVkw30h14ZqIrhP/bwp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1608 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1608 AcroRd32.exe 1608 AcroRd32.exe 1608 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\904908c27d2f7b0d8e7f01072177cbcd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1608
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5deffaf18c795e1b2a2b0d2c550bfb402
SHA1f232060889919cc4561a1a65e7bf81fe315c7c64
SHA25620c50414760656ee6facfd6106cc3e21d0a7a5cfc49f4a428fd6dc57ef63528b
SHA51226fb7006db81e7e728c2a23cf7a11e2d85c92c19bb849206fed9b391fc35a50f01aa944711137939bc5b956e91afad46a91e916635d4b86572cc8a9c6a0ca7eb