Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 07:45
Behavioral task
behavioral1
Sample
1a7c7e2c6e84fb5b18011bbd2ece2f94_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a7c7e2c6e84fb5b18011bbd2ece2f94_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
1a7c7e2c6e84fb5b18011bbd2ece2f94_JaffaCakes118.pdf
-
Size
80KB
-
MD5
1a7c7e2c6e84fb5b18011bbd2ece2f94
-
SHA1
7ccbf52c4efb1d60c06c249f3e35ce6e9a76275e
-
SHA256
5487f9e7a42dd3671be27a9b8581fd49aa34d29fb05d2c23401d8e0277b960d2
-
SHA512
688900576373918e813b2e7e00a5892952364611933e2b9545bc4e19a5bfc41d265ae2eaa5b78b5ca93564240b30015ca5ba90f9c242379dac1c6f9157fb5b01
-
SSDEEP
1536:o1WRSUkUr/BxBTZulWiPPYBigJx2fVAR2IW1HPESNEAWwpOSt/KMFtUnBB:ECkUrmPgt29AR2lvR+PSNzFtUz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1676 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1676 AcroRd32.exe 1676 AcroRd32.exe 1676 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a7c7e2c6e84fb5b18011bbd2ece2f94_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD50bcc77c5de84dfe9f5382616bfd692d1
SHA18efa947199255a023df24215725c86ea9e180791
SHA2560d0441839c350c667d6fd80642aca6890ff4f298a0f3acb9937dc5881d7aee69
SHA512496a4a5d2d004ead5678eceeec2235b735660cd6ca77fbe81f8511769949807e93be278537a52e6c857dda2c441e9985e333e7edeedd062cdbc57c6642f25871