Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 17:57
Behavioral task
behavioral1
Sample
0c4f6dd69b687b483f535855c3439a5d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c4f6dd69b687b483f535855c3439a5d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0c4f6dd69b687b483f535855c3439a5d_JaffaCakes118.pdf
-
Size
73KB
-
MD5
0c4f6dd69b687b483f535855c3439a5d
-
SHA1
1e346686fee916827d2af7f8dbe0db537f35c046
-
SHA256
7f85e6acf8d84cf99364707523b9b135ffe9bdb6188fa3a8e19e5b1d638fabe3
-
SHA512
562fbdab0ca326c11a94a49400c0dd31e38247012d1c7a6018ce63864a9fb6142bdb58af38577c32694ce7db9a40922f37f3c080e09064420470f0aeee5a3a85
-
SSDEEP
1536:/2VROf5HU4/7Hw0TMywdT25Wd3143jmF+pfuWkNpOPaW6GP4bi09nifjKW:+VROfy67Q0TaTJ9a3jm4pfTPHP4N9niv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 840 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 840 AcroRd32.exe 840 AcroRd32.exe 840 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c4f6dd69b687b483f535855c3439a5d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:840
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57f22a7b8b7fcb447ed02df8a286b4f6b
SHA191f03abf71c77129f7a4c35041a1e0621d9ebb4c
SHA256a7e5ce2c8326d16d9180deb295a85f247e51df4082c7af8f5231f8c1b8b7bcaf
SHA512da6549f44e473c3aa084ab3fca4e360ed8997805c9fca4c9d1166b0a81fa7bc6b2c018f4db00d5f2a4188a99e2fe054d4f5942649f0e5a2e83d5a6f00ed54c38