Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 21:26
Behavioral task
behavioral1
Sample
106ea5be32403e0b8aa62fc5550e2a34_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
106ea5be32403e0b8aa62fc5550e2a34_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
106ea5be32403e0b8aa62fc5550e2a34_JaffaCakes118.pdf
-
Size
73KB
-
MD5
106ea5be32403e0b8aa62fc5550e2a34
-
SHA1
5b72b6b6bab7456bf83db9bc05d4519fbdbdb9ad
-
SHA256
daaff802f5882bfad1f5ef9f0ff8284cc8b6dd7fc255c8acd0a6e384d68ae702
-
SHA512
b8dc400568948b8d6a09d721b7c6c81e9cb3f01eb674cfec8093cfd9724113ce9e1cf6aa69fa17360befbf2f93d694abd78906ada46577c2c24127a189b128a5
-
SSDEEP
1536:2MNG3GJAIt55CXjRll3EZSdguSxad10WOpOwrJ2UItW3qs9pJWknyi:zQXcUgTadwrJ2/jsvJWm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\106ea5be32403e0b8aa62fc5550e2a34_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cb6b5e317fcb04bc712f6923165cd225
SHA1e179a0701fcd2b05b52f7a16874d91b7142325b5
SHA256f533784d26aea5abcf69f8a07b1a8efb1efb9a1695f6d62de48117f7d7482853
SHA512fb1bb28fcd18267722e47710caf22648429624d16778e07a1936e828418e2cea0331da88adc868242f63b8bc1ede0a36e2eb33bacae46eb2295db36afd4173d3