Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 08:21
Behavioral task
behavioral1
Sample
014208ee3b5fa5dad80ba6e5244472bb_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
014208ee3b5fa5dad80ba6e5244472bb_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
014208ee3b5fa5dad80ba6e5244472bb_JaffaCakes118.pdf
-
Size
72KB
-
MD5
014208ee3b5fa5dad80ba6e5244472bb
-
SHA1
7831771e686444ad51a46946c3c9b61b807b3f52
-
SHA256
60aef3fe24d81dc96bb4340895c7b98ed256f46e5f239aa2860468a5a9e2c583
-
SHA512
48ca2da2861700035030fa4beaf6aa5c7c610deea87da9e6f17fc96907f6f70166cc14eab1545abfdc72f9cfab05180842d3702fd677d0c93c5a472cb8a3af3b
-
SSDEEP
1536:FILgjtjx6531Fm5V1zsIN0Mt2xLYXWkTp6zahkyC3WwpOSK9na:qLgBo5FFmf1T0Mt2xLYHhkzKSp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2212 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2212 AcroRd32.exe 2212 AcroRd32.exe 2212 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\014208ee3b5fa5dad80ba6e5244472bb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2212
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b1ba4c3cb1533d86deeb730aff9b083f
SHA1c7b7a3ae1bc85df1ea6e3ffd103af9eeb12049ae
SHA2565e6e8589127bcd9a19676db6e69795a0b9f7ef3673b5812576ae24a8fca09aa8
SHA51279cf0d1e264b4cca77e7f952bda2beae076c7cc880519db23539938f069addd88eb2d5482b52c66cdc5d41af60a9def3569d669eb96c165c914f236083362552