Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 22:00
Behavioral task
behavioral1
Sample
113921fcd2e41ea3f095ed81daa969ff_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
113921fcd2e41ea3f095ed81daa969ff_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
113921fcd2e41ea3f095ed81daa969ff_JaffaCakes118.pdf
-
Size
82KB
-
MD5
113921fcd2e41ea3f095ed81daa969ff
-
SHA1
464350a0dbf841d045c59769f7b70e0d8957dd9d
-
SHA256
a919d8384d0e28121b3ffd5b550f0e6018e2a2b2b28373d90470b4dbbf5aa6f7
-
SHA512
7fdd2f4aa26b30c39c7d281a638af557f2736c125b150f2a57cc0bd2d48e103b05b11af341baddeda924931cbae2a0ed1c59ea95e59aac178f0037380e3f947b
-
SSDEEP
1536:ucHftzij531I4V4Gicr6O7gVSeeDQwJNyvzcHowWg2fn8i2IPWhosWUpO7sEZKG:T4j5lI4IcrHkVSee0wJNybcHL2fn8lsH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2812 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2812 AcroRd32.exe 2812 AcroRd32.exe 2812 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\113921fcd2e41ea3f095ed81daa969ff_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2812
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b4af3a6db865f54bd4c6f12836612e60
SHA150a7ae85405fe6dd32aba09cf80f64fbd5469bb7
SHA256578ebf26188772c5265da887a96334220433b5d4babef1f28c6059aa973627d5
SHA512fcdff14e0cdea75e32c4d60699393b52341c8766ef519d85ce0efa77dc997b3fbb9e6da6112652a76781d4c344dfcc312bc25604d79ce9c91a33d29f1c0ffa2e