Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 15:51
Behavioral task
behavioral1
Sample
0ea5b8ed6eeb733d4329b97713666bb3_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ea5b8ed6eeb733d4329b97713666bb3_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
0ea5b8ed6eeb733d4329b97713666bb3_JaffaCakes118.pdf
-
Size
78KB
-
MD5
0ea5b8ed6eeb733d4329b97713666bb3
-
SHA1
8871294eebc3e60f480437922d46de9983329299
-
SHA256
090f822d7d255d5bc527683f6c4d28c4f7dcbf0a8876d4ee09722388927cc133
-
SHA512
5558ca795741e16764dac46afa404ed06243427ad9fc004cabf2a30bd23ac8bd81059490b12d438b819cacabebf588a4a4d8fb985dfdc94041571a8d9b490870
-
SSDEEP
1536:Fa4CjksXw5vxmypDpHikQcAJt58hj01zXHU16kXwWxQcBnVW8pO+LpeNqP:Pa60oDpCwqt5zzXH0z1k+8I
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 308 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 308 AcroRd32.exe 308 AcroRd32.exe 308 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ea5b8ed6eeb733d4329b97713666bb3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:308
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ccd852adecbe4aacf34bd4fa24817810
SHA16b5fb2b54ee850fa0fdaee6e9aefeacc92500205
SHA256dfff4ab730a0aa9d10d857cffa3db82e70b131dc13ae07943b71763765198cbb
SHA512cb4fe689b0acf731fd9259f9237a41e5abbbc81cdb45308bec7321b81b9ed7620628dad1e0499de42113a09d7cf9fa7852a4f78f939affaa518e094379def73b