Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 22:31
Behavioral task
behavioral1
Sample
abc6782cde3507c2599ac3e2fae7aff7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abc6782cde3507c2599ac3e2fae7aff7_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
abc6782cde3507c2599ac3e2fae7aff7_JaffaCakes118.pdf
-
Size
46KB
-
MD5
abc6782cde3507c2599ac3e2fae7aff7
-
SHA1
08dbd0021e0348cde2ec767045aa0912dd4f064d
-
SHA256
ae27a64c6bd9c7cab33ba9607cf535a2186554271a3559a009c43d8f3d02ec6e
-
SHA512
57d2d60ea6a674e54c94aa0c080d4a37e8f9c5d5cdb7cf1cf8274b931a2bec2ac3c48957aaf0f853a99d3232124492dc7f13f395225ce6e17323c15777f51b1c
-
SSDEEP
768:zgGzpDyBVksi8xKS8Qm1jqqmksFmnLU1g30ABDabPzcKPltyLFOxVToBI:MGFm6DavcKPlIIxVTeI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 856 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 856 AcroRd32.exe 856 AcroRd32.exe 856 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abc6782cde3507c2599ac3e2fae7aff7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56dd37536ad08af7efd5ebcc26e15357b
SHA19a52ed633f4a17ea099ea07848022a3c52938d9b
SHA2563ba87ee7fc5eca4d445f395d34c126a5d431502fa22d8db21463659aa2b619ad
SHA51264116b41fdefce4ae7e758e5c427b4a695996ea1c0372f1056982dd7232b4384e9a3061aa33a4abf32e0a7f57dff4bc7dce01b852548d0d333189c92be84b1a2