Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 10:49
Behavioral task
behavioral1
Sample
0812eca7e76c3299c6c41506f0a1a56f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0812eca7e76c3299c6c41506f0a1a56f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
0812eca7e76c3299c6c41506f0a1a56f_JaffaCakes118.pdf
-
Size
9KB
-
MD5
0812eca7e76c3299c6c41506f0a1a56f
-
SHA1
f66501e748c7922fcd7efd711b1f31e7483f7617
-
SHA256
d1adbc743bc32fad5aa27538331c4bc2e75bf9a632be4222281bc7f192ec4a7e
-
SHA512
d20104d22bfefded9b290061042b07b031e7a06856350ee172e61d0d953b2fe166022cafe21a0b2770a63834b316c46ced26d8b0df3e15c3b6140994f8a74062
-
SSDEEP
192:0Pz4ULMxLIKXHszskvfULAB2enjEPGXq2Eh4N34h46keFApXIvfUxat+ooW0uHeG:0Pz4ULMxLIKXHsAK3B2FGXqQNoh46kKR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2020 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0812eca7e76c3299c6c41506f0a1a56f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD501a2cab0f1d578b4fc36be787a4f349d
SHA1b7649f5b699f790f5a1253ab20f75009e04ea56f
SHA256b3b0022b6248082ae410130a8c0c29c24fcbcfb8e101665cdff78e74159c756d
SHA51299d5cc3973025cec584e89c33bdc76cc2ad912eedccc8b070356f52f40de4c0eb1607be4d5d58151106291f084b9415d226a377a85c940363a087b8da8994b35