Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 11:38
Behavioral task
behavioral1
Sample
04b3258fcb4b522d05bbdb7299f7bbc9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04b3258fcb4b522d05bbdb7299f7bbc9_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
04b3258fcb4b522d05bbdb7299f7bbc9_JaffaCakes118.pdf
-
Size
71KB
-
MD5
04b3258fcb4b522d05bbdb7299f7bbc9
-
SHA1
cd02214ce5edd859ab677f72a4f4a00835d2f9a2
-
SHA256
39cdc2544ddc549e7c3a7c42f6448eb30d6d239b3518ba7ad463134a8dae2483
-
SHA512
648093bd64a06fce5c062dc9b2df5c223db83c9b77bc844b4dcf2eead53757e9a3fce7e309e33d5c8d6a0374790de842e816e64a9bf9eecc57031f300ad94b53
-
SSDEEP
1536:/20UpBwZRwVGq7bJPSb73l0qkJWC2WR6D4p+WspORSBq9ZnV:pUpB3kq743l0qkiD4pRRS0z
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2792 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2792 AcroRd32.exe 2792 AcroRd32.exe 2792 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04b3258fcb4b522d05bbdb7299f7bbc9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2792
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD527515233146ee294b1cc123e6a40463b
SHA12a7bb906b6f95904d14d1a6584ca6067532c8fac
SHA2564412906478f1204404696d627d8d4e7b858bc6aa035fa1c4b35e818aab3079c8
SHA5127f675f8f975a5631b12942be9d13fccaf795eba2929e511eecb4764ac418ca85b7a865cfce075acac794e580b2d208fbdc8a755d913bd27ed279071ab21d9de7