Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 08:45
Behavioral task
behavioral1
Sample
a8cb807da039fdd31d6f60ff857a9843_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a8cb807da039fdd31d6f60ff857a9843_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
a8cb807da039fdd31d6f60ff857a9843_JaffaCakes118.pdf
-
Size
29KB
-
MD5
a8cb807da039fdd31d6f60ff857a9843
-
SHA1
4a266e151463aec6c6ddb0063ccdfcc35ab034dc
-
SHA256
e3ffdb6e21fa4614fae6f2af3566ab692c8e2eb0d0ddd1a7a79f4693c7fc9ee7
-
SHA512
decc426016fd47b5c27d6a2a262f412774c70b059164b940500f3090e6833a6c54c737b796e3956fd64ef7d320e8c73d8307ce561bb4d1498ce73f4e2e672a47
-
SSDEEP
768:+l7tRPNBz2sBFd2I9ZesvJ8vYqTOWyq1shW2D1SaV12MAqABXvE56XuMZmwgCLWv:sv32u2I9ZesvJ8vYqTOWyq1shW2D1Ss9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a8cb807da039fdd31d6f60ff857a9843_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59cfeceba16fb77c6256f437f2857c469
SHA127b110f28c967292ab7b991bc1033422bd56f149
SHA25654d2cc5230ead7eba99c8cd965e89cc9def060059e59b509edfdd5dab47c0882
SHA5120b01d10b2ae7c1519729d4dbc2fc95948f38954d3e48079787fc13912951a3a293516442117b06542e028a088bce3d964f8ffba917867b4d8a536d3d057bdb66