Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 18:44
Behavioral task
behavioral1
Sample
0d3197a2c45afec7b56ff655a2a9efeb_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d3197a2c45afec7b56ff655a2a9efeb_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0d3197a2c45afec7b56ff655a2a9efeb_JaffaCakes118.pdf
-
Size
82KB
-
MD5
0d3197a2c45afec7b56ff655a2a9efeb
-
SHA1
ec8ceaf98db75ed4a064c582af67d5444bf77587
-
SHA256
06d3afed49b91776ffbe8ad91c6d108fb16aa2a2ba593d7fe6f1d55b64047086
-
SHA512
116bb7ac3481ffd7566b667d2d205576b88b81eff20ea41c430b127b7f99e9c3606d2c012a9714d3bd57204b057fae9763e6e70cce11ddb027c22a55ddab79f6
-
SSDEEP
1536:vjABF73gzR/M+KKBwVgwrI2rC2n8Acvy6PHhmfA+te49fikJ1VzWx0vquoE6I/Zy:bEF73yR/M+KK6g8ne28AWvgfFtlexOb4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2368 AcroRd32.exe 2368 AcroRd32.exe 2368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d3197a2c45afec7b56ff655a2a9efeb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5755711e3a20a70f18687d6a7c670ee77
SHA1b529dbfeeb2d91e0d48f517ce8d51c4c4b3f3520
SHA256713ba0eec0cd57fadb93e1e8af3e200a950484fc94ecae1d4e171672884847d8
SHA512168acbacc6b30194f550c4f9497435fe05e1a7884dcc4055eeee4a4271243bc644e369faa09eb249bdba151720a42aa44636697a3e35c2829dc9b4c1c0dcd95e