Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 22:04
Behavioral task
behavioral1
Sample
114c33bfe941f8026a9e6bcc53544020_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
114c33bfe941f8026a9e6bcc53544020_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
114c33bfe941f8026a9e6bcc53544020_JaffaCakes118.pdf
-
Size
74KB
-
MD5
114c33bfe941f8026a9e6bcc53544020
-
SHA1
53e36126224cdf7158901afd008cf2d856c0743f
-
SHA256
41027e019fee59e48b96bee2cf9c454585d25d38f5266bd86794b28d8e2263e3
-
SHA512
5a44350ef15423698aaa41af1296f388fac9f45c1462f2d05d0c4ad737aff897d74fe3b01691234ee9bc2f977a9adda6282dd880c2a2154cd88f6fb67f07f483
-
SSDEEP
1536:ZycdGvY49J0ft80+Lt9J4N+AABtGsWiljMInOGGB9ZuWepOZIIN:MMYp9J0ft8Zt9J4NsBtGnInxGRXZV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1116 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1116 AcroRd32.exe 1116 AcroRd32.exe 1116 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\114c33bfe941f8026a9e6bcc53544020_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1116
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e7b6e4487bf5a871bfccb9c7d8a0e899
SHA1fe498d450c4b8065fc1d8bf97e4e3356874eb94c
SHA256350c83197121c8a4b8b8111e2d2d4123613193ae14cd32c2f1a4de88bd75eb78
SHA512a75c67df5b64d91ed51a4c16120d136b9c5b21dc9fe238c4146be98a0f2a7206870cd738c5497f0019f747947264b3481f035ac14dd9049b60c8fef4d43d73a6