Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 18:40
Behavioral task
behavioral1
Sample
9f2cb530b8eacbec5cea08ce8526dc8e_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
9f2cb530b8eacbec5cea08ce8526dc8e_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9f2cb530b8eacbec5cea08ce8526dc8e_JaffaCakes118.pdf
-
Size
39KB
-
MD5
9f2cb530b8eacbec5cea08ce8526dc8e
-
SHA1
57204ba04b930990a4e30025a40cb7e402bdb1cc
-
SHA256
d90df628e19960d821805f316c2c3dcaf2dc1edff3686d7f24045f154f3d3ded
-
SHA512
cc3d4c88385bdbb22414e9fdb1e2bcc1c3ea65a7f8071ab3cac4f74bcb679b4fb676a961484a27e166bde5bf5a5eadea5558414cad5421ccf12c51c8e4686f8b
-
SSDEEP
768:xjProaRMg8hyyBoulcefn0GhkpkylE1gzJ+EBVO+OrpTO/WOl+lQIVhV9SBRpXje:9PrpZ8hlBRcef0vkylE1cJ+EBVO+WpTz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1860 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1860 AcroRd32.exe 1860 AcroRd32.exe 1860 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9f2cb530b8eacbec5cea08ce8526dc8e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1860
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50ca6ae09227da4d80e8cd96a79500fba
SHA155b66f85b1203c3ebaa0524be1142ea75eb721de
SHA2568405c2d06ba80714f5264f4fa5908e4701377b0e447dc39b61ece6da822652f8
SHA51256afb49b02edfd3b2bcedd9797218fd333dafc8839e64bd7bdb1e4ce2efe04a25a4e0c23951605d452e565a5420e3e4bdaeeb46ea4941762268b2f9143c2eb16