Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 13:48
Behavioral task
behavioral1
Sample
07256ec3a08848185e41521a0c5b9b83_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07256ec3a08848185e41521a0c5b9b83_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
07256ec3a08848185e41521a0c5b9b83_JaffaCakes118.pdf
-
Size
77KB
-
MD5
07256ec3a08848185e41521a0c5b9b83
-
SHA1
2452ee7353fb12af19cf9b21a902f6293a95b32f
-
SHA256
63f42723c83ea30a57bf5dd835f06a02801229528ca3f27f11156795b025d4e5
-
SHA512
fc4e880273440701858ec9a9b7a59ff20ab0b4845b475cf65e6f66bd203efc51bde6ceb24716f6540a793037585f872cf17126b4fd08857885c46d0e48aa4524
-
SSDEEP
1536:DcYIo+j/SChoGaIDj8T40wOhOWkNpOP08ipEW+UbjqMdGT:VI3mG9DoTlwuP01pSOjjY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2352 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07256ec3a08848185e41521a0c5b9b83_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2352
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57235e21a52933f62724a3ed3b78318b7
SHA1605237998a2e21e414607baba233d66418368995
SHA256627fa7f7bbf7bd482849a11c78c99f35e561e4727f0d20db5933da6c12933f74
SHA5121d38d7a3bf5285f3051fe56eb7bf10133593bbc34395036f63362b21c6945f4cfb2c8f1d4f032725d618966ae7f7e221cd7d3c205a793ae08792810e0286df4b