Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 15:17
Behavioral task
behavioral1
Sample
08ff1eca14ffadf0766202bc34fd61f2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08ff1eca14ffadf0766202bc34fd61f2_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
08ff1eca14ffadf0766202bc34fd61f2_JaffaCakes118.pdf
-
Size
81KB
-
MD5
08ff1eca14ffadf0766202bc34fd61f2
-
SHA1
a977e86ee5f9756db34d98de2b6f0c5083db9c66
-
SHA256
8872bbc62414efcad5da87195f05bb4c80e7ae148325f539ca5c1167c64a3f2b
-
SHA512
0d7203986126b234fd2ecda8b5896c76d90c39ed06a0baf5b3c83507ee9a4d678fb730af25f68947a11b49c1aa31951cd3d4e35690e113b017ff5347d50de677
-
SSDEEP
1536:1PZyaTnGLT4+4J7QdImRkxIKbgUHgJSv/eWspORGWSvwI8DcXMPBf:l/nGX4sRkxIwbHg2/xR0vF8J
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08ff1eca14ffadf0766202bc34fd61f2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b307bff919b29f2ff159a0b2572ec455
SHA13da541ace9af56b09adaa7eb08ee8a7a93366c41
SHA256f72d5fa4b1c0ee49375a8796453fde52b852f5ccb32f2a732336f5ff894139af
SHA512c8b061cdcbf251aa3d42fd9db7ecd21ab0377c89fa940b221616caa7fb1879ca8d7d5c8c2417bb515a0edd7abebba3988a18b993bf10459d33759633c8d63d4c