Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 09:49
Behavioral task
behavioral1
Sample
9dc256ac559cc75fa917af05f6be85b3_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9dc256ac559cc75fa917af05f6be85b3_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9dc256ac559cc75fa917af05f6be85b3_JaffaCakes118.pdf
-
Size
52KB
-
MD5
9dc256ac559cc75fa917af05f6be85b3
-
SHA1
0f447fefe2907a4acbda71437654108778484a57
-
SHA256
1cc71a508b96b2b4a8a4bd0a40ebf1dcab8acab94f9e0ce803828bcdb66f1fc3
-
SHA512
239f650c161324935b025460b0af9f32f387bf4a492ff51529c82474162d95517f7cbb92153cb3d4d0bb17f7e58700134ceb7aa4ab26e70b351b27fd51d124db
-
SSDEEP
1536:wGF0pPaabQAYdqht5GeSZU0/JvsNJ+lomIn:9F0pPahAYdq35GeIRJ2+lK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2260 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2260 AcroRd32.exe 2260 AcroRd32.exe 2260 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9dc256ac559cc75fa917af05f6be85b3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2260
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD594e0bf9611c2c923e68f49dc8b569de8
SHA13e56b7be0d59ffd93348015c698e29dc2ae4618c
SHA256d6404e966708590f08799fa91c8ced9c90965a97c208773b7bd52197852793b2
SHA5121cfdd4a299161d5078f9aab379026e9c8dd4a18a8f4e1ed3674992623340c48be856ee8311405a780a212c4179a27ac02a637cbdecfb092bdb79048abbdfb997