Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 10:45
Behavioral task
behavioral1
Sample
080ca68f396483f97d7c7f8539c57703_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
080ca68f396483f97d7c7f8539c57703_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
080ca68f396483f97d7c7f8539c57703_JaffaCakes118.pdf
-
Size
66KB
-
MD5
080ca68f396483f97d7c7f8539c57703
-
SHA1
10e84e90707b0934978f10e01e48bdb3d3f8d574
-
SHA256
82218f192e116366f728086c8eb92f92f9381873510a423d3252f9d1ccd81f86
-
SHA512
ffa78d6a7d0100bf7afdcfa56cce54e3985698a33e13ab4e4eb1f232e6287134b616c68d364a691ad012c91084263124e44a40eb838a1707d66db7c6234c6cc3
-
SSDEEP
768:TOIhfvzCXFEveAGR7e2B/OmZesKeQsDK6EojjCqKq2v+n4dmumg5VYk84Ge2eFQE:TRzMv7vBmmCeQYjLz8JCT4TQ9VJRly
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 492 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 492 AcroRd32.exe 492 AcroRd32.exe 492 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\080ca68f396483f97d7c7f8539c57703_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:492
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD534986ce695993794e5c04331d6f9f21e
SHA1e7be4c5b130808456c0eea00bd3b551284cd2deb
SHA2563cc347beaf7642bb0831ab946b453268f882796f347a1777daec1a6253328b60
SHA5120595c0c758800fe03eaafbd2791599276b88398e33e29216edb97ee94806af4ba09ff9c6f36d80063444fbfaf3f926c5ea39ff1ddf4df1741e6346546f267f6e