Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 08:26
Behavioral task
behavioral1
Sample
01567ffc513f390a2a3dcff459dc96a7_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01567ffc513f390a2a3dcff459dc96a7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
01567ffc513f390a2a3dcff459dc96a7_JaffaCakes118.pdf
-
Size
78KB
-
MD5
01567ffc513f390a2a3dcff459dc96a7
-
SHA1
711ccce4734ab5e10a9254f90c51f80b434d841e
-
SHA256
c880ecc8b72673beeb8f68d8315ec47d09e1570710d55e329009f3f0acb7553e
-
SHA512
e07e53e69897d1c7c24db77ec7a762d4fddf5d8b13e9099a9e0294401fa7b991cdd934f93cb7bc073d5e6bb9c4bef435d4457419fcbca977e164fac321144c5b
-
SSDEEP
1536:IT6NPexTPk4EcaTdo9MurPw+WRDWGpOKhI5bWesvpC6w:c6NmxzaLo9MgMuKhI5JsvpI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2548 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2548 AcroRd32.exe 2548 AcroRd32.exe 2548 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01567ffc513f390a2a3dcff459dc96a7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2548
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ffc243d0a672c1fbd08fb49587c95213
SHA1bad920fcd77ca9a1653e3d6de49d3392e790e25f
SHA25601f760bf6b1e4acfd88f063577dba951793bbaee8ce11519b4c2a8e2950c46d7
SHA512401470ee2aa21d15ee456cfbdead029c12b0d2fc1fcfa2be55eeee327e43a5317f159f5a4ff8db6a5ce503fd0cf4c7172aece4d12fe0c57395c33e4c0e03810c