Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 13:59
Behavioral task
behavioral1
Sample
075a9d366bea12ca7971e1448e4a23ce_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
075a9d366bea12ca7971e1448e4a23ce_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
075a9d366bea12ca7971e1448e4a23ce_JaffaCakes118.pdf
-
Size
48KB
-
MD5
075a9d366bea12ca7971e1448e4a23ce
-
SHA1
75069be508c89eecfee820360c06d6b7a1ae88bd
-
SHA256
f0d37aebb5f8f01959159b43e83c31eea694df7495a8681166ce8b63b743a955
-
SHA512
1d28e77f5a9815d8178d55d0716a31fbb5fe800d058c982ba2f20db43b64b9c1e0fefb1d051c938e08d14b585df135a8beac85d80393c587a6071326b932968f
-
SSDEEP
1536:YiT4Spa4advp7mRMzakTJBLjP5twAKu/CcivT64rec5:5Jcea/CHL64L5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1800 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1800 AcroRd32.exe 1800 AcroRd32.exe 1800 AcroRd32.exe 1800 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\075a9d366bea12ca7971e1448e4a23ce_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1800
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5261b864c693491cc369e55346d5dd508
SHA16769eac129ae677f1a223fa63a8c9da63a00880c
SHA2567b12724af85221057ab4a115e824d2ad18e1fa2f6a54001785d64d1c4c417e4a
SHA512aeadfa264cd5fcc6b5a84a31e4fd39e4e0dc81631d97a0dcdcb337517d2c9329a5507158b446d7741777390436d9a168f624d374e9d745d06f731045ec720dda