Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03-06-2024 16:19
Behavioral task
behavioral1
Sample
926b86d9542c59006b4dbb5c856d40c8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
926b86d9542c59006b4dbb5c856d40c8_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
926b86d9542c59006b4dbb5c856d40c8_JaffaCakes118.pdf
-
Size
16KB
-
MD5
926b86d9542c59006b4dbb5c856d40c8
-
SHA1
10574f137dcb17c7d093ddb408235d3c312edad8
-
SHA256
5867008d6a67ca627c4c13b3d6069e1fd630daf9b877d4cb14e51b97b7500fcc
-
SHA512
f15520540b6f933a2e0b9f7c59370e38e5eea3c50e7541f9f414cf95c50c66f9f542b23d2c50325374a1e845ecabe9f19134c3e18e9e8d8e1676f353879ed1ee
-
SSDEEP
384:VzEKTqz1HVKenQrzNR3po+F047OuNZNToEKAJHodzIMw3sBqQIm0FGyLLisJASmn:Vzfez1HVKenQrzNR3po+F047O0ZNTLKb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2420 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2420 AcroRd32.exe 2420 AcroRd32.exe 2420 AcroRd32.exe 2420 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\926b86d9542c59006b4dbb5c856d40c8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2420
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD513ee24fc7459d895754594f760c29141
SHA131332d750517cc6c1b0521cfada09f36b44ab98c
SHA2568f4e5fedf9d44f819e59d35ce8037755c5557756b00f823be94c1ddb5a94326a
SHA51295ddcbe41c2c744cc1de4be6c8f880c38bc2add66fd3dc866b5244871e8f2908fb18b17f8796559a2ec32bb785e636dae3ae9c7afd8d3d1c7bd9c1fb12e8e1a7