Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 16:08
Behavioral task
behavioral1
Sample
0a0abd64fbcfc79751b5180040eb7210_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a0abd64fbcfc79751b5180040eb7210_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0a0abd64fbcfc79751b5180040eb7210_JaffaCakes118.pdf
-
Size
33KB
-
MD5
0a0abd64fbcfc79751b5180040eb7210
-
SHA1
7d04b4e7f45ebd1c953572834a8c81a5fd630563
-
SHA256
cfbe380afe2f4cc7527f690b770dd4a5fab92cf1706a9405bd7cd46083162f55
-
SHA512
bdc6074acd595cf982d7fdbbabbbaaf86a32474c9f7235d823a2913f602a76ba524a4232e3a3ea343cb1e2b00fccb76137a0cebfe329ebbd4c3775d461069c17
-
SSDEEP
768:TULABNvD29D/L4ucxXCahb0rxjt0IV3RDVLs:TCABYlEumhbtIBRDVLs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a0abd64fbcfc79751b5180040eb7210_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2124
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56baf66d9d0d24963b95303741152c621
SHA1d00ad5a19ea21616e2342c139f8b2892ad45e685
SHA256f1965307b01a51c0f94ce4ecc44d105c363e42f932ca6c9676fa736807af5acc
SHA5124b09b2029949c3a2fd3343af6094bae09afde2496b05acf19e87a9138e637c3852d1c0652a98b35b9c4440616fc93a7caeb4815ad4ac0b17b907fba31d5ffc5d