Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 08:34
Behavioral task
behavioral1
Sample
942d8a85f6a02fbccd100218c7087b10_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
942d8a85f6a02fbccd100218c7087b10_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
942d8a85f6a02fbccd100218c7087b10_JaffaCakes118.pdf
-
Size
41KB
-
MD5
942d8a85f6a02fbccd100218c7087b10
-
SHA1
645ef863a9e30cfb99486856e18a8495af920221
-
SHA256
c45a848edefcfcc912e354a34de15f034544510d28923e07e9be8559fbf625fb
-
SHA512
d77718e5a9e9f9920d7fce97e1fd5ff158857a5c3d91384e70ceb224cb46954b3f864b1f02495d5b22bc4f8cfc875c4e30aa3b34e2fd1af5b0fed1cd518809c0
-
SSDEEP
768:MXuMZmwgCLWar6E5HpxDPQ9b+DcIuOndrbYqRM2ZuElt9dWNRo2cCTdDSty9GiNU:MXFZmGWSbjDPQ9b+DcIuSdrbYqRM2Zu6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1628 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1628 AcroRd32.exe 1628 AcroRd32.exe 1628 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\942d8a85f6a02fbccd100218c7087b10_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1628
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5511e10415f2f777fc4b0d996112ad404
SHA1459a624719f2ba0b4d6b2901de5eb521b3a852e4
SHA256b562f0a43fd2a0930b230dd15c393cb80864e148829b4115975ee43c0af4972c
SHA512a1a9ac6fa445e12a2ba3a7ab1eb1f33988f413a4aa8e34b2d4a837750b4fb69d0a5a03f9affb380fc030a2f952e9e6429b5d6e939b2c9161ff76002bf85483b2