Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 23:27
Behavioral task
behavioral1
Sample
12b78dffb378b8ed69626d92975b2eac_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12b78dffb378b8ed69626d92975b2eac_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
12b78dffb378b8ed69626d92975b2eac_JaffaCakes118.pdf
-
Size
83KB
-
MD5
12b78dffb378b8ed69626d92975b2eac
-
SHA1
56899726e7e6f122a4a6b54b80e00836e4f09040
-
SHA256
c2e7f27132ac43e2351fabe9034fdd6135cf3668df904e10c34959415f507484
-
SHA512
c84af30a3798371a96e654e98ca9c52c9a993804ff06c22bc8526e2d0b796ebfe0721fa385599d90058258d92e7677c40498ffa96c1a3c53864eb2d380dbf6d2
-
SSDEEP
1536:8IoGiwubqR22crrl5AvWzN9PzBVte8f52DGDqQbWCpOViskij/JzlWNJvEFdOZe8:ToUx22ctFN9PzBre8f5KnViski7JzoJT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1220 AcroRd32.exe 1220 AcroRd32.exe 1220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12b78dffb378b8ed69626d92975b2eac_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dcdeae5f4425968387499bc9a31a6863
SHA1bd7f1c70fefdfe771ec0f63c236db4eb14904618
SHA256d1111b5898e8f3929b551633921eba3028e00eb2a4701b4c995a4694c87aeaf1
SHA51263402d51bcb20110aea9d4fe9e7038129419b0f720f1014e683c4e3ec1c287e58b89d72d3a275c0013d34196f195872507771401d89cf46f4f9a3b3e8f5347ea