Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-07-2024 23:54
Behavioral task
behavioral1
Sample
27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf
-
Size
15KB
-
MD5
27372c8088d10455b72860cadcb07fd1
-
SHA1
5cadd6e291893449f44aa853e0a31e457abee9a4
-
SHA256
bab8136dbe0d74c5ec75fb2778dcd6a02ba0296019bf8e99633e0bce3c48d76f
-
SHA512
f25d3d119181cf0627684c1bac196a5edc5cf3f3256399a81a7f45fa81cbe3cb432ed4c328e2c97d9744683882713edcca92b1b378d0d6d64fcf49ebdec4745e
-
SSDEEP
384:KP5uqkLaNlm+gTl/ozxEuJYk4EtWgwKT9sPp14x+skUm1uqdiLY/:Mm+g56xEuFIfKCPp142UyhdD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 880 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 880 AcroRd32.exe 880 AcroRd32.exe 880 AcroRd32.exe 880 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27372c8088d10455b72860cadcb07fd1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:880
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ef4b82dc9e9b582e56748eb61c0e60c5
SHA1ad6924a4af55126534584404646d498e81785a93
SHA2561eb1ff276bf3c2800261966f77c3740777d39b34675e9f38fa1b98432727dad1
SHA512b1bef65f476f0d8d41c2fbb1819edbc4f06054ed3aa33a8147cdae17d585e05827e7990e390dcc6c3021253bd0303d7039fdbd9d90113ac572a055ce2a0635ee