Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 03:26
Behavioral task
behavioral1
Sample
acbc4bcc7d2f999302d3d6ac82d42f78_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
acbc4bcc7d2f999302d3d6ac82d42f78_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
acbc4bcc7d2f999302d3d6ac82d42f78_JaffaCakes118.pdf
-
Size
46KB
-
MD5
acbc4bcc7d2f999302d3d6ac82d42f78
-
SHA1
7fd201a79d40ea95f139b508a7a6ff2fb3273418
-
SHA256
5670d7729255e5f07eedbffc45674576865e73e097795eed22de75150ed1e796
-
SHA512
9d57bb3d9ba54fbde46f37e0172acdbce039aaebc67f50ca24ae598bc3f8985e1dc48c5ce0725733e656e5d28c13a8d8cb4f4fa6e474f98b8814c0618c2ec751
-
SSDEEP
768:9gGzpDyBVksi865QGjUm9nerFwcM/7kowyChyfcXYw46VN2U4otvhQxIgpPZCGfq:+GFmy5Mpy9w7jft5QxZPZvf/i
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2068 AcroRd32.exe 2068 AcroRd32.exe 2068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\acbc4bcc7d2f999302d3d6ac82d42f78_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2068
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55c5c46c7f3fc3e972aa43e1ac80b1364
SHA1377aa5c5320209aba4bd0b7f31888f3a3836a342
SHA2568a9f3973e0a5c2867fcd361d0594ad56252e64e8322d7b66b6e99b409e6be819
SHA5121f447456705c0bcd31439e58928d099c2839bd9e66cb836f3fcf675c956659e2f4b14faff7881352bbf0dc2d36c37f205219e9406088ec762ebb0f45193c9f51