Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 11:22
Behavioral task
behavioral1
Sample
045a7bd6c8e05737f8ac40e23eab16e0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
045a7bd6c8e05737f8ac40e23eab16e0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
045a7bd6c8e05737f8ac40e23eab16e0_JaffaCakes118.pdf
-
Size
86KB
-
MD5
045a7bd6c8e05737f8ac40e23eab16e0
-
SHA1
dfc6a7cdc7cde9e42bc1dff1c2813f0e065e0336
-
SHA256
4c43befbdc7de455839f3994e948c5c378ee1f97fb66ad6f15e502dfd749379e
-
SHA512
04617f285244fd34a57ff377c295bbd7ae5c23f6a01ae24083df58e0d47f8da2f9bebb3b7feef18a467d66f5c51b552539de97b1fbf9c6af06194d89c4fedd91
-
SSDEEP
1536:Pygn7utzGODiXFQ/pbHOn70h33NW+EhVtsf93RQJ/31afWAnW16U0ZddpNPuWQpw:agnStSODiXFQuYt9WXVtsfM30Rblvd7T
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2304 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2304 AcroRd32.exe 2304 AcroRd32.exe 2304 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\045a7bd6c8e05737f8ac40e23eab16e0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2304
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54befc1a0df38400428f7e5f7c0017418
SHA1f1c65d68959612a85f5827ea21951e536016eec9
SHA256d3d8b474ce1fbe6efd5ab15105c286994cdc5e81a270230043e077883cb1740b
SHA5120d0c4aac5ea190b81501a8198cae836f51c6f88d4e6254a93d660f1e876b232b693d73757bde853a19d63c663aae2b6f10f458502e255782b01eb9613c6f0e7b