Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 17:46
Behavioral task
behavioral1
Sample
9f07e90a70bfa0b5fa3c97e3483a6f17_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f07e90a70bfa0b5fa3c97e3483a6f17_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9f07e90a70bfa0b5fa3c97e3483a6f17_JaffaCakes118.pdf
-
Size
44KB
-
MD5
9f07e90a70bfa0b5fa3c97e3483a6f17
-
SHA1
5405dd8e84e67bd522c93494cfc0d2b2d1615d52
-
SHA256
bfd10949f7677e1c32b9c39af21ef22672f20afec46d19d1f94039764e5c5331
-
SHA512
78783c123d5e204888a9263083370bd53a9533cc6d57a62cd2ade582b9b40a6f6f278c06594653d06bdf358f625eb66e2a2653314b50744a493ed98aa7aa545b
-
SSDEEP
768:bgGzpD6tz2neGRy8SYcnMRc6spXTKIYrOwLGjHdYxp6b/VocITtelIeydvKrxse+:kGFWaq6s9tYawLGjixp6TCJTQlIeeK+Z
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f07e90a70bfa0b5fa3c97e3483a6f17_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b364f9d733f922542d7bba18fa63cab0
SHA1f715e55b00859deecc3ddab52b7fbf63045ddce8
SHA25670e529c6db95278082ba46c58d4dee1329545b75a45233d8e08cf3ae6cf1b87c
SHA51243e0abf2219654c98a4530b9043682b10eab6c0d0afca90d93dddb5c445156f33d08cb479d6011698b82e6c0a35ea1a96fa845c47d7848ecafb0c041624341d1