Analysis
-
max time kernel
118s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 16:47
Behavioral task
behavioral1
Sample
0ae1324ea0b6753f3338231203d09e8d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ae1324ea0b6753f3338231203d09e8d_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
0ae1324ea0b6753f3338231203d09e8d_JaffaCakes118.pdf
-
Size
69KB
-
MD5
0ae1324ea0b6753f3338231203d09e8d
-
SHA1
219560269ad91787dd656f3d127bdd4e52303c64
-
SHA256
c8025397639e72158e26c17153d8878557c0ac08384c9524dfb8037f53b32e48
-
SHA512
87a5d09cc9cbed5718b4aa9ea4c15a50864e84d80bc7421ec6291fb2496706a8114a7b3844447385e31177b8217dde47a255314adddb05db5fe681bba4b4ea19
-
SSDEEP
1536:U/F15CWz8ttFwWNSbn480eKyLTP3+OWOpOwrKWhpXbcdSjspd:xttFrNab0ILqjwr3pL3jy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2000 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2000 AcroRd32.exe 2000 AcroRd32.exe 2000 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ae1324ea0b6753f3338231203d09e8d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2000
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54eff0f7c778b4a89558d103d0152d2eb
SHA1f61a4d0b0f45c2de7c9134d42c2bc7116be6a388
SHA25616d01d1dd15af72834b3df21a4cf28d7a51f9538141fcb511e1644bf7d8b773e
SHA51213d48a05990f3db8deb2743a372a8b9c4933768c03e9b1660b72abd4176beae99aa709394e7f2a245e9956de62a9083cd152f8d59c57a03d1eb00d3f804bd5d3