Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 18:15
Behavioral task
behavioral1
Sample
25c079d8a42f34f2b25a7c2d1c640bcc_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25c079d8a42f34f2b25a7c2d1c640bcc_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
25c079d8a42f34f2b25a7c2d1c640bcc_JaffaCakes118.pdf
-
Size
9KB
-
MD5
25c079d8a42f34f2b25a7c2d1c640bcc
-
SHA1
a33fd856f6b469bfa7a5588e6a19e1c0ba576109
-
SHA256
1ec134b3656da8d9a092895f52b2c0710dc1499729cda9b22b37d4d8b8f30463
-
SHA512
cab7488abc8209fcdf3d4ea16c7f41c415ed19347fb460240f6701ed02c1ccb450fad81896ec08a468969086b79cae1991354e1d4107d0ad2cde0c6e815e93bb
-
SSDEEP
192:tPz4ULMxLIKXHsfyxqEHOfEEwZvYvKX87qGYPE+r6c+WEjuNyRW4wAy6wf1kCZ:tPz4ULMxLIKXHsfCqEu8zZv7X8WGoEMt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25c079d8a42f34f2b25a7c2d1c640bcc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD580b41cf8a188efd7ddd4c4e396abf3a2
SHA1189d60d902d42efc86088549ceb39ffa1a85c3d2
SHA256ca867c4b7fac04b001f4968ee4d2b616158c4dd96e2278aea954c88154096b88
SHA512a2a604dc873cf0e5bb1cc0c8452abdaa677dbbab4ccf33881fa36fae7af03ca089efb307b7eb79d46c10f33bf7ee7a66ef202e10ce2e88817ec249b27f4be803