Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 16:38
Behavioral task
behavioral1
Sample
98a6495d3074f347ffa39174a805ac27_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
98a6495d3074f347ffa39174a805ac27_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
98a6495d3074f347ffa39174a805ac27_JaffaCakes118.pdf
-
Size
818KB
-
MD5
98a6495d3074f347ffa39174a805ac27
-
SHA1
cd9179b494790078712ea6aae09c051f17fb3183
-
SHA256
6d0612568ddbdd4b4e121b16ea3b087eec0d12fccd11a3223da38926d4c62cae
-
SHA512
07c6c68def24a30aa8fe3f0967514321323333cdb3d3d290f285c2f47e5378210e08faddbfa62ef1574e99d6374627196d001befd715c7df2cbdfc554e575d89
-
SSDEEP
12288:CAKRvvC6tjMWZ5JaaMrnDoPSJKXFWCzRM/uCYL6Nosc9h0KdNTuvGI4n8eKeKC75:CU7KVb6uiN+hH7dl8eBt2v0WJ3xVuFu8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2340 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2340 AcroRd32.exe 2340 AcroRd32.exe 2340 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98a6495d3074f347ffa39174a805ac27_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53dc277658108b710195b224a02506824
SHA140a21a9c8dd91614d9eede966b93ac6b07cfd366
SHA256988524681c3a4445cc9f28c29c85716956823ad8a4507878188597389596ae48
SHA5125d4d90638114eddf71d29b849fdabdd184494d74483bd89bc0a02c86c9c6cc01c83f6a90c78e570419c804f9253ab873645aab1e6314f1636fd5766217ff68a8