Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 09:39
Behavioral task
behavioral1
Sample
0255688e4c2a188445c14d699a6a99ce_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0255688e4c2a188445c14d699a6a99ce_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0255688e4c2a188445c14d699a6a99ce_JaffaCakes118.pdf
-
Size
72KB
-
MD5
0255688e4c2a188445c14d699a6a99ce
-
SHA1
88bcdd12f9d67f3a94b5d3204fbcfd01c7ace500
-
SHA256
5ead45619272372a0719b8cc6786d371e9410035204ad6941c51b6616c113d34
-
SHA512
caf006328b56e02d455352a8718b512de51299257cb6bcdcb3d5540379fa15fd13e2a59a33cc4820e28ff7de41bbaba0e5501f082c81cc2d6fc6b2eb6645355b
-
SSDEEP
1536:VTcf6wAWfBO678+RQFh+6nIx3nCwzpV+KWOpOwrKWArLLpG5hUI:w6M86tEA6IhpV+/wr7p
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1368 AcroRd32.exe 1368 AcroRd32.exe 1368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0255688e4c2a188445c14d699a6a99ce_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5961567f7026cc53ca07de1a7885092e0
SHA1c666d31544ff0d8ead53bf3573099354a37cb817
SHA25600a0e1095b94ca37fcb01987e44b1088d84f20b9a87c8500072f1b19575931e3
SHA5124f3e1c155f062787754c015e738c4436c8b29d063ef50060240dd688dc0212ce082d0d4f78721f5bdd2fd414eae575ac568acba593be2a4f04980410990f2fb2