Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 19:49
Behavioral task
behavioral1
Sample
9911d00409e724b286c3273ceb7500b1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9911d00409e724b286c3273ceb7500b1_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9911d00409e724b286c3273ceb7500b1_JaffaCakes118.pdf
-
Size
75KB
-
MD5
9911d00409e724b286c3273ceb7500b1
-
SHA1
e763b58650264c642b399634e235b421ed304432
-
SHA256
1d519ace1f8244695059ac3dd9d255b444aa2df044b93534813177f1223e3c4b
-
SHA512
aa77b02e0e9285e4bee5939351b94a1a658fea0b8a68da7177f84b702d32779f7a126b6bd986a48a02876dcbdf712df72df9bc5643ba21c51ad9cbef3d583f99
-
SSDEEP
1536:mGFmtCeP8OpMJKza5BiVDZ3rtB7JrAF/fM+SiNZcar:/FmMePd/zH35BZAF/fM+SiNKG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2772 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2772 AcroRd32.exe 2772 AcroRd32.exe 2772 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9911d00409e724b286c3273ceb7500b1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2772
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5db4e8b64b0ac0cc99e7ddd6d938b3118
SHA1cab9d06ad5df9a3094eda814126e6fefb02471c6
SHA256e7ca37c17f753b7a53abd8c056b7702e9d8942ba6fc3d89b16bba8c5a399fa8f
SHA5127c70ae5b3bb1de083b899ff1053d629fa29a508831291cf484d498bf490d76c79fd0bdec33f033d14ef14d413504b657e8bd17001811318564f731ae71e125ae