Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 09:10
Behavioral task
behavioral1
Sample
1ab7387b7caeabe208d8ee292484eece_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1ab7387b7caeabe208d8ee292484eece_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
1ab7387b7caeabe208d8ee292484eece_JaffaCakes118.pdf
-
Size
81KB
-
MD5
1ab7387b7caeabe208d8ee292484eece
-
SHA1
0367f1d85beaf0b759120b23cd548f0ccaa6aba7
-
SHA256
1bf249245260bea99d294bb864e12bf49e4975493970ae1b88fd9b2a87c6852a
-
SHA512
711c7a4adc7217b2b86663e8efe6f7ccb30be0c5cc7652cb09ddb36608e2c9a3805ffe0c2a21ea8a92c1fe9c578270e1f0dd648d8271d9744c06c112bb22e0e7
-
SSDEEP
1536:l4qM1mxZxYKtLDaKLFr/EIGw5rMHNPWHpOvTWV+CNJzKvVxn4K:uqwmxoKtLDam1EIGwZMtNve+3vDd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1732 AcroRd32.exe 1732 AcroRd32.exe 1732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ab7387b7caeabe208d8ee292484eece_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5d4f98530a98f35f5c2d802124c97f137
SHA198f639ac7e101566ea5778cca24982a1f1087af4
SHA25681202ac69db7ce9707696a2f733643d9d188d7a96c54e91850987067d1b9ad7b
SHA512a75a2c1fd302eaf1ce6f79097ca69b7d0da981166558a91ad6d231a4c664657ae73dd1a58b40fd9d0ba0f9f61c04e5d8e2b39a6430afc1b37c347e1d28d1d5d7