Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 17:50
Behavioral task
behavioral1
Sample
0c28aa91f9b7c75814dc7b23c62e529a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c28aa91f9b7c75814dc7b23c62e529a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0c28aa91f9b7c75814dc7b23c62e529a_JaffaCakes118.pdf
-
Size
68KB
-
MD5
0c28aa91f9b7c75814dc7b23c62e529a
-
SHA1
d8d6ea42269f30ff33ef471d18388540f661f3ca
-
SHA256
e0c76347ec45f2666b4e43d994654a9f7317966f9f274b4c885a4fb6853fcc4a
-
SHA512
c6f8b76d4534430215dd6540e87835811369da172e942734f6c4805cb72df25e9ecfedca41e5880af9d0303235b047aa6c32c8eadabacf689fd7e9f6d9e2e40e
-
SSDEEP
1536:SYHr61eMglGBt5djCWla1b/149X7wQvxXbhOWiwyuSWspORGQKureT7SuL:ng7bb+Wy/i9EQvdHyu1RxK4ev
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2364 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2364 AcroRd32.exe 2364 AcroRd32.exe 2364 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c28aa91f9b7c75814dc7b23c62e529a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bf5d712d5590dcf36d3f37d0e8f36426
SHA1382bba93a144f5d72b94a126eb098b2d28c838bb
SHA25645f2e9999845a76dced140df55151249e8497da031562ae225dbcf8feeb32040
SHA5125afe0680b75a65f8c12fe513dc4bf3ab6fc39f0622d49561730652f3e07854381c275a7eb5183059ed6831cbbc1b8d0c852999568a74768d48fba63810cc17ff