Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 07:01
Behavioral task
behavioral1
Sample
000fdb1bdcd185b46266ae704a6afc0b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
000fdb1bdcd185b46266ae704a6afc0b_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
000fdb1bdcd185b46266ae704a6afc0b_JaffaCakes118.pdf
-
Size
126KB
-
MD5
000fdb1bdcd185b46266ae704a6afc0b
-
SHA1
ca597712639f22fdf273c16d1a6ddc0f500409b4
-
SHA256
26dcac99f6863902c69370fec2836da48b3e3723a0c7fbd80b8ef0c132812841
-
SHA512
a8810483653cad92264ee7cceda73f2da5cedc859ca282007e8ba34425a4d68d0f4050ffa014024c30938669b8a8a3e697148e037ebf64a2ecbca08b8787c922
-
SSDEEP
3072:59cape+xZ4j7/t+9ujkVHJMZi5Yu/EZ1NEzrbfCFiEXAiz2PkZk:gHj7/s9uQh5Yua1NUr7CkrXka
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2720 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2720 AcroRd32.exe 2720 AcroRd32.exe 2720 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\000fdb1bdcd185b46266ae704a6afc0b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2720
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cde1e6a51a025e15a8abec734c73152b
SHA1623632bb3c7b8232fe20f2c6b455d4932a635646
SHA2567885ce78f95306e51552fbba024b87b0d363a1855e70725a0fcfdcc18b09be37
SHA512ea947224aa3782765d092b403913c3f892a15714358a3ac3513e44f5f6d7247f189749a4a23e2d0dc3575133009948b1351f05165c0b2b89b96add0eddfcc26d