Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
03-07-2024 22:27
Behavioral task
behavioral1
Sample
23a88319eb2d55e0fa0916a8f90443d1_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23a88319eb2d55e0fa0916a8f90443d1_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
23a88319eb2d55e0fa0916a8f90443d1_JaffaCakes118.pdf
-
Size
46KB
-
MD5
23a88319eb2d55e0fa0916a8f90443d1
-
SHA1
8270e826f2f2e86395f1ef22ab3c324aaca6c27d
-
SHA256
acde62e691c99f9cc3a466423c68672ac6da13e34902f6e4e2fab3a126fdd07f
-
SHA512
f05345a8a002334e31b9f3667aa0169decc9bfc7223c664ea29fe11b4ce71bced49c5d1c9c1367f15f7e8920753efe55cc03389c88cad70e7e09d53eecfb25cf
-
SSDEEP
768:zXoPawcKd5YHbUl6JIu5u2wJfaIGvDkQK74OS6YnziGFQfmgUMWlxDNfu:boPTcKd5pyImkaIGLPm4D63GKuKoDZu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2204 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2204 AcroRd32.exe 2204 AcroRd32.exe 2204 AcroRd32.exe 2204 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23a88319eb2d55e0fa0916a8f90443d1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fd2d9a7b8c2bb350ff57812a036febb0
SHA1fdbbeb0154a08c9d6bfded3042f8ca208ffc1276
SHA25663c41ceb30ec996f5bab8132e9201c23df7177fcf8c127e82ad6230c07d6add2
SHA512226201303f678c822bed5dca982073fe2cf9eef939e755758310acf5494eef6f6f7e7caeff2d6e4f12b64cd29aec0c0cd31774cefca827aec866b393df481a2e