Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 12:38
Behavioral task
behavioral1
Sample
91d0a5de83d364b492dfeaeb6daed18b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91d0a5de83d364b492dfeaeb6daed18b_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
91d0a5de83d364b492dfeaeb6daed18b_JaffaCakes118.pdf
-
Size
50KB
-
MD5
91d0a5de83d364b492dfeaeb6daed18b
-
SHA1
e8926d71445e2a3d935a78463f4608f1f7e1e104
-
SHA256
455390c844d98295a024f0233cb402565c4b316df95a7317d644628f7d63f6a7
-
SHA512
d5395d386a15a9a0231598045db070eb61b0ae533ad0f8806acfa05fa8a590d99f90f58d668c0b147e83c8747c3dc349816e6ae5a4da0dfc93969ce756b97e49
-
SSDEEP
1536:yGFbehzyCftHxYFguHSJ4G6H0HWC+iYkc:rFbegCftRYbBH0dNU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1996 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1996 AcroRd32.exe 1996 AcroRd32.exe 1996 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91d0a5de83d364b492dfeaeb6daed18b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1996
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cc841e22153f7483d3b60e9f462d26e8
SHA1d2f0e79015af6b1abc27cbe929457ddb4b1fc8b6
SHA256d3101648b14d4c5a474934a23a36c9abb4065ee8f299b5fa5c27ae8f53ab901e
SHA512d2b7cd8b2903d5a4e56ec2d687a4d0570b96e036911274299a5cea4a573e00daf1f9d2b88a2d217bae5d889362a0452db84c52bf79bc8fc699bbfb4fcf70cb55