Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 15:13
Behavioral task
behavioral1
Sample
08ea90468bd52e13057ee92cc6596326_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08ea90468bd52e13057ee92cc6596326_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
08ea90468bd52e13057ee92cc6596326_JaffaCakes118.pdf
-
Size
84KB
-
MD5
08ea90468bd52e13057ee92cc6596326
-
SHA1
0f82ea20ad9f2a58fe24adeb06409feadbac92c3
-
SHA256
6b3d8a3047103d20252e2d8ba3fda3cd820a0a77736e16eecf73e58034521b28
-
SHA512
b129dfffca24401fa66c4ad56625a0f9e14b0f1e185379e7b958ff13fbbcddea899d8a4b5c315070cdb6816b29ff88623f5ee835428801bef7877993a4dbb431
-
SSDEEP
1536:mwpbRwTMdZRB5fyPpUQGgucUZi4eXzIGHSWUuT2U0h0x0si2WcpOmFybY:B+TOjk2QGgEZxeX/Hyw0Wvipm7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 744 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 744 AcroRd32.exe 744 AcroRd32.exe 744 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08ea90468bd52e13057ee92cc6596326_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:744
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c1510944855ba443e4d0e820da79e52e
SHA19acf7cc8302d65eb88c3ca8557fa758b2bd8b4c7
SHA2562e7b25ea5265664f9cf62c1650507926c840b43c5fe774888d2791a436169bba
SHA512457088e1270447399aaeef4f727f8c524532224f777452f557a7ef609fa85ee5bb5b391d5303b121a08a39f53bb65de6c908f71d86579a78130eccac4c996568