Analysis
- max time kernel
120s - max time network
120s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
11/06/2024, 14:42
Behavioral task
behavioral1
Sample
9e8ba34903340966586e3a3f23739e34_JaffaCakes118.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9e8ba34903340966586e3a3f23739e34_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
6 signatures
150 seconds
General
- Target 9e8ba34903340966586e3a3f23739e34_JaffaCakes118.pdf
- Size 40KB
- Sample240611-r2743a1amd
- SHA256 65d9a7c98f8dfd789217e217ca431ccbdca7263cc56a5edaf8584922bc6744e3
- MD5 9e8ba34903340966586e3a3f23739e34
- SHA1 d31a6693d49239139350c260465cd97518ce68cd
- SHA512 e8f84e202204428a67dc818a2b03727b6ef3fdb86d9627325805a6f38555ac3caea4be72d512cc016689bc0a65951f4c5442b5b4b58cbf90701d9f7ef19771c5
- SSDEEP 768:fgGzpDipC9puEcRYiY2l0+4+J0xbAyAUr+N5HkYIdZuSa7H+f9ApRpS4:oGFep4+fryp+N5HaWTGkRpS4
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2472 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2472 AcroRd32.exe 2472 AcroRd32.exe 2472 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9e8ba34903340966586e3a3f23739e34_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2472
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 e154caac87c7d60f57122307d27d26245f843c49bb098713857c350473c200e2
- MD5 3ffde8a20e01a2e7a53afd40a297b173
- SHA1 372423785d883b25cda4a991b0f182ce01e8f6b6
- SHA512 cc4eacb3bc492133cf7cc37fda7b7489f7ea939938f19b1c8b6589e26a6b9ab7b190bff069123550747abd6564d70ed923e7f3aeb4e9a65f38a12812dc2da63e
- MD5 SHA1 SHA512