Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 10:12
Behavioral task
behavioral1
Sample
02e75545beafa00b383acb331f1982c2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02e75545beafa00b383acb331f1982c2_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
02e75545beafa00b383acb331f1982c2_JaffaCakes118.pdf
-
Size
76KB
-
MD5
02e75545beafa00b383acb331f1982c2
-
SHA1
681721c2369da7a275a127bf23f83cbe23a31779
-
SHA256
178883d6c2b1388da9d9304dacd436e8db3b9961732c67129386fa358c50de92
-
SHA512
de7dfb9263e481f20e78bef84afb86cf2be6959553d77244c094f9fdb3d231ceac9957e057847e17f673214944ee595c143b49b7e7286201f9c01285c6064f88
-
SSDEEP
1536:xIkg7sIXk6t9TVX/vsQ95fS05vIWHpOvTWP1d3HVqGt5+:Kkg7s/yOAlSOvwv83HVqG6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1968 AcroRd32.exe 1968 AcroRd32.exe 1968 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\02e75545beafa00b383acb331f1982c2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e5653d213291f675db9e4be4ff701b26
SHA1545c98006e61bf43962e4d485bb1b650bf617eff
SHA25655ca8e71b737158e92e47361c38bccc148e30ba4c6607ebb06bcd85a5380174f
SHA5126df0fa8ce65399ba88afc0adb8810630503b90922a52d5e6a9edbbef599898bfd457e307bac21f67a35ffa0d1d04776faa5f0b9a1ed40cdc9f28b8ea8404d090