Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 22:19
Behavioral task
behavioral1
Sample
11960c7c9001c1ced218608bda55e45d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
11960c7c9001c1ced218608bda55e45d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
11960c7c9001c1ced218608bda55e45d_JaffaCakes118.pdf
-
Size
108KB
-
MD5
11960c7c9001c1ced218608bda55e45d
-
SHA1
f9e2f6d1a55083bd0d5ebe1ea020f3acf8cea062
-
SHA256
a91ef778a942112ca8be74aa293a3c99d0b5036754b085cf86fa428ed60b74e9
-
SHA512
9a80bedc934828de3f2a0f4743c058707310072d4d86ba21bedddaa50865fe4b31da5ae78f8232e2054ed5c4f312262e58f1c9980f81694de430d59892472903
-
SSDEEP
3072:2WAQ3xsPj1upE6nRdFtfqUdzKTxDkNbg3S8qqr51IRU2WoBw:2W5s7ApEARd2UzKTRug3Sb6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11960c7c9001c1ced218608bda55e45d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55038a04aa9b70eaf1b1e7773e7d39c88
SHA133651c5681985e840605a9a2b1329bc883091269
SHA25669165045f9cc97af3ec25b9d8847e016d3555611d4d4c0d02ade2fb9b4b37ef3
SHA512882c796f5e97544cb75402e3b82cdff09d7b754403f8fac8ac1fe4099962f91c42acb512777c9acddf5f32445414674229bdff54aebc406327d7595df9f06f81