Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 23:00
Behavioral task
behavioral1
Sample
a700edabee2b69c7fa8cfc05ab070f5d_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a700edabee2b69c7fa8cfc05ab070f5d_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a700edabee2b69c7fa8cfc05ab070f5d_JaffaCakes118.pdf
-
Size
59KB
-
MD5
a700edabee2b69c7fa8cfc05ab070f5d
-
SHA1
e66cc2e46b993647a60d7cf2426277cb55f46c2e
-
SHA256
c27311915442068abd4451f65850478f31087b19b04c53e7afe94d9cc46a068b
-
SHA512
5bb5321689309575377a647bdeaad92ed724c96ac7d78807ba304e49aa499be98deb717f86d7193babaa57715708bd76f2e70b25ef69a9f692e5c57ea03919b5
-
SSDEEP
1536:SGF//2lx2yuKtvB9huViWRXMyOrGb5mNLMMudSD:LF/iuKuVxRXMyUGE+Mv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1160 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1160 AcroRd32.exe 1160 AcroRd32.exe 1160 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a700edabee2b69c7fa8cfc05ab070f5d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5302344512db1aa204e2546f843a22cf3
SHA1262e32d60c40c07c273e47def282e1dd8c50b1ce
SHA256799d77ee927154f1c9afbd76a5ad1bbcff865b9851368d4890d83386c950f0f5
SHA5126bdd5f2137eff00565b152492366fdca70fd66095efda54f0ece8b3c3ee1c943d763e1a96c8681fe180df06fd219add9a9730fe59708153d9e6a86efa2b86924