Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 13:45
Behavioral task
behavioral1
Sample
0713536c8b0e136efaa49c1802f69ffd_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0713536c8b0e136efaa49c1802f69ffd_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0713536c8b0e136efaa49c1802f69ffd_JaffaCakes118.pdf
-
Size
64KB
-
MD5
0713536c8b0e136efaa49c1802f69ffd
-
SHA1
cdbb49b57a498414bb21bee91395d64eb938b8de
-
SHA256
8f2c5342ac1940d821cb9be98ccb5e3e02b5e9ac27855942e09fd914f3cc1d81
-
SHA512
701ec5112bcf8c518c78ec2753647351a20cc147b50466f4beefeeff33a76c1543bd03a430b7f5f113cac6958a4338f5a474b2c2c185f45c8e2890977390525d
-
SSDEEP
1536:reOKShSXdeyq7qfA3wWqxPgjoAGwMPFWB8MuTWXpO//G:aBLdeHyAgnxPqoAAPFWyMI/e
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0713536c8b0e136efaa49c1802f69ffd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5497929664681c16ecaa6e8fe5c22ad4b
SHA1f621fe748af6f67353025241fa80f87881777564
SHA2560c99069ebf9a1a2efc1630bfa072c52330f48822de7fdb6caa4835c8fbeeeccb
SHA512ddc93483f78ccfffbcc97602fd7b7731918f03ec5b1d411aac813f2e086d5a10227fb7c4b9ccb4f653c6e2b28d78cd1a9541c4333a81d1ba582800a95fafebbb