Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 21:52
Behavioral task
behavioral1
Sample
1109b8633d67919434ae2ccb5a299e46_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1109b8633d67919434ae2ccb5a299e46_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1109b8633d67919434ae2ccb5a299e46_JaffaCakes118.pdf
-
Size
70KB
-
MD5
1109b8633d67919434ae2ccb5a299e46
-
SHA1
f1b9547cba64b9c6d4eb1311a5aec9c04de5bb23
-
SHA256
391395a210a4474f38a4751065beffab5ea0bea7aeeb1abf72365002232c4cca
-
SHA512
0d28e49277081bd0be5be3a79a7fab9b5024775f5c971e0ed81ceea1692b5dd2334bf59cd15ced875902aa05133fbef4814668e31730544758584d4134652de5
-
SSDEEP
1536:L/AIoHqh55UmPXfYWiEmM+Zd8Aw6jOLWpnpvEuqc2MJYWOpOaZfnVk3te:NosnwZd8AwCOwnp89AJVaZfn64
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2320 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2320 AcroRd32.exe 2320 AcroRd32.exe 2320 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1109b8633d67919434ae2ccb5a299e46_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2320
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53efdf3528b177eb2869a70f99961c698
SHA18edb03973f1988fe899352fd97a9cad4c1e19458
SHA2564f77aa5f3766e8a27f54b6997b35da75472e7751b129c8f2cf55edabfcd3628e
SHA512360a94e7ce28cdf801a85713eac6a5f6eacef6193e1e98f2a34898393da00015b3255fb0e5aabf44e9c27afea13d89542b826ab77856854ae74310d011596e3b