Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03-06-2024 11:34
Behavioral task
behavioral1
Sample
91a1f109e9ade2d4b2ebef5257786c66_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
91a1f109e9ade2d4b2ebef5257786c66_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
91a1f109e9ade2d4b2ebef5257786c66_JaffaCakes118.pdf
-
Size
36KB
-
MD5
91a1f109e9ade2d4b2ebef5257786c66
-
SHA1
b738fecbee59cb81557aec4af5bf52e999baf71b
-
SHA256
9a4f8d74dbdcd53e4fccd269c645af4d1360a02e927b935f2e5d77dc6a44c192
-
SHA512
f5114061d82428b6535cfb93e62b09199e03b6b1916f4a5d3c11da4b9e907b8aaef246c688f322e6cb0d12613f4c3f286fcbb78e55afc9f03c1f4ee9e3f439bc
-
SSDEEP
768:SXuMZmwgCLWarPa8x+cDLBrzEf/GSn7C5njF+Wkx9h2/diYPk:SXFZmGWSSGfvBrzw/GSn7Clj07x9hudW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2104 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2104 AcroRd32.exe 2104 AcroRd32.exe 2104 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91a1f109e9ade2d4b2ebef5257786c66_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2104
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a4dd3ebad39dc2bc3a59815c0c616ce7
SHA1cb9c5a3d60e619c17886caea336035186f129bcf
SHA256b48c5f20e51735b02e365b69f3b73c5fab698621a4608f5252760fd4c9dd75e1
SHA512712d749d292b8d8ebc54071f9ff04ba0f83b43ffb33ec6c0ed73763ba127e6c20ecd37308ab171edb4b1578849adbcdda926c55f59020f9d7a516972c4d7f56b