Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 08:23
Behavioral task
behavioral1
Sample
0148ddff1b00ac716a55ae7903a6c352_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0148ddff1b00ac716a55ae7903a6c352_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0148ddff1b00ac716a55ae7903a6c352_JaffaCakes118.pdf
-
Size
79KB
-
MD5
0148ddff1b00ac716a55ae7903a6c352
-
SHA1
ba4c9adfe09a2f708a9520290d69a8ade4280a1d
-
SHA256
a46c581e2629b46499ec1d6b1bd4bffb5126ba31aaf81f4ca5e6ca8d64f86eaa
-
SHA512
3676e53aef99d6c53b3d4b65b47606183dc48d9d29a4f56bd0683727b830205d6071e52ca90de36580de0ba881bd449912186dd564a9c1ae70ec51d0b5694443
-
SSDEEP
1536:QAL37AS5C7q04rSKqlIAtBzYwHMW0kqdbOWYGcwpOuEWQpOCVEQgTGH:v/Ar7YSKKIAHxHMW0kqhmGcwYuDCVCa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1640 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1640 AcroRd32.exe 1640 AcroRd32.exe 1640 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0148ddff1b00ac716a55ae7903a6c352_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1640
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ac485cf68012db35706b358406ff9f02
SHA1d800542e3269cb0749dd83b261295d7bc4293382
SHA2560b128c9f4295839d78669d16ccf813d0e810ff212d0a1ff4e02748dd86279c82
SHA5126a133e9d4378d563e2d96055ddbac5c7ad7cffdd164ee1741034f81dd911aec87c6cb00ddee5ce12a22d7e5c3c96574975b7604ba852ec52daa69fa8b7ee6f35