Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 08:07
Behavioral task
behavioral1
Sample
910f7ba26b0aa3627d9190f1f54c7c74_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
910f7ba26b0aa3627d9190f1f54c7c74_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 910f7ba26b0aa3627d9190f1f54c7c74_JaffaCakes118.pdf
- Size 49KB
- Sample240603-j1dj3aaa49
- SHA256 3df73fa53913ad4d2b7a88e9e2d25a341732494eae536ec31ed58f27d371585a
- MD5 910f7ba26b0aa3627d9190f1f54c7c74
- SHA1 04427847c0563ad6a3df7703603e49b06aade6e3
- SHA512 17e9ae58623e7a4e11fbf16b404db1d620740ba4cfd43b43d48e31dd04ee982192b103204a88ad0d80cd192f57f56252126567dcf58bc466b7dd4b012fd420ff
- SSDEEP 768:wgGzpDSWfWcPsQMOsm4UxRsnaBCKdI/sL5SlENFsqDxvpeHWkbtqxK6H8tBagTVG:dGFzSrsL5S6NFs4tpe3btqyBagTVG
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2080 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2080 AcroRd32.exe 2080 AcroRd32.exe 2080 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\910f7ba26b0aa3627d9190f1f54c7c74_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2080
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 a4ae294a09ce26a5c20a4b652741b62b57e42ef9ef80adc4efb1cf53688e35d9
- MD5 305d5c88b1f72c46f687246ae9edd824
- SHA1 1551f47aaea48a955566e4d89c2309e537f7e07d
- SHA512 5e399389839468d8f2aa463c1899f0afc2a6bf9037e354f7ef30c3d3501701bdee40a5277f58c1d12d0b9d45c2029981e035d7bb7dea6126b3efd8daed5cdbc5
- MD5 SHA1 SHA512