Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 00:20
Behavioral task
behavioral1
Sample
96befb69ac3f4dac9262aba2ffd5244d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
96befb69ac3f4dac9262aba2ffd5244d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
96befb69ac3f4dac9262aba2ffd5244d_JaffaCakes118.pdf
-
Size
61KB
-
MD5
96befb69ac3f4dac9262aba2ffd5244d
-
SHA1
3a3f09efd875079f4c6d3b6eef338ad359c2bd9e
-
SHA256
f07963e6f7d16485bd1f431e1372ac38a74866e70fbbccff469975ee779b2604
-
SHA512
e3e2c7c5fe0c19bf5d09473a47c893fbf9f8e720a8420d498f18837e8a5396e6190c7aba3874716587641c4b08f46455307fc8d47040f1048e73f37fab7fee39
-
SSDEEP
1536:aGFje9UuoNrl52vUxqI808+tzelWplLqZqG05be:DFje9Uu0l4cMIjtzLleZqG0M
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2140 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2140 AcroRd32.exe 2140 AcroRd32.exe 2140 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96befb69ac3f4dac9262aba2ffd5244d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2140
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57c1d690f27bf0184fc222eb3edb33738
SHA18f505fcff197e5f8be2b0ab8069faf3dcddc6d33
SHA2566c90d035a42a1cb109799b3858256a2dd6f2e4981eb2835fe7069dcd131bc16e
SHA51286780dccfaad5909ffcf9a97bd24fb75963ed300a4ad21b2c2f08f8ba9d4e103a517bd320ce63373bc30036a294d5a9cc44a96648d2fe54a0c0c8149a9f5c9f8