Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 13:19
Behavioral task
behavioral1
Sample
91ed6c9ab03961fa07c35aae30f2f260_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
91ed6c9ab03961fa07c35aae30f2f260_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
91ed6c9ab03961fa07c35aae30f2f260_JaffaCakes118.pdf
-
Size
39KB
-
MD5
91ed6c9ab03961fa07c35aae30f2f260
-
SHA1
24803f5ee06657608784b015f1aafeb66d491194
-
SHA256
7cfd0302edc0d361474292a908fe14dcb631db9d394b20ec9abf3ac873c70bb9
-
SHA512
41bbe0963a0b69e4292694fb646116a8478b5301c16c45a5bd4fafd0a0a60f418c336daf0b6a642d761970fa259c4226b6a521cc60d564ceccdb4c949f3d2e62
-
SSDEEP
768:aJiQGzPXour39XKx5VeXWYzS/sKwqz0is6ZIo2PBpFnDsu0RMEtN:EJGzPXR3cxfZY/yIo2PBpFDcRMEtN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91ed6c9ab03961fa07c35aae30f2f260_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b59c22b260d5c52387dc8663262eda1c
SHA1bc430cf8bae1c538d7b5ea25ff23cf96d1e19ea4
SHA2561572ba1271c1e8bdb505299fa813dca105f5ae5963833df19acd96f428c1c899
SHA512bdfea3df5b2348b0859a5f770c6651b0e0958508f656ee06fa6acb78d8c1efb1592ff1c911fe6948c87f95ab745f2d3d87a039a12df525105550a4eea8ede6ef