Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 17:27
Behavioral task
behavioral1
Sample
0baf29e2e3e02b85dbac3726ca9d4a33_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0baf29e2e3e02b85dbac3726ca9d4a33_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
0baf29e2e3e02b85dbac3726ca9d4a33_JaffaCakes118.pdf
-
Size
73KB
-
MD5
0baf29e2e3e02b85dbac3726ca9d4a33
-
SHA1
6b2bc61c43863ab643643df59a957629dd8b6a9d
-
SHA256
bea88a8d7effbab7f17f2c95fa7d2544fb5c6dad523a93921f11b2f135dd17ca
-
SHA512
e8b5ce253363fecdb66f25ba1dc41d0363c11d0e1f64bf9db9bee2264c2abed589082449daf5ed9cbecd32df8d93ce7653d23188e4bd4a06e1cf0fdb822b5419
-
SSDEEP
1536:taitkh3hXTx8Xfr6wHJKYlEJyHCjmvqvC9s3ZUaFWvXTKKv30gvaWwpOSk:kSkp9MrHzEMwmvT4ZURXTbv30gvNSk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2352 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0baf29e2e3e02b85dbac3726ca9d4a33_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2352
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD524121be07ee285df0b343ab9dbca88fa
SHA12f7faf5903cb235f67d14cfa24943881efac4440
SHA25648437f27215069c14dacd5b1157be0fe08effdc192f138794dc5cb32cb7ff53c
SHA512027b5f904fd97c0e10d641e7d9f63e465ec6edac17e82aafb42c142d9834cbb9766188e5f2b735c5465564713a8ddb9eab64ef2f3c38ccb1304a7a33d2919ac0