Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-03-2024 19:52
Behavioral task
behavioral1
Sample
0e92b29ac19d6a5923abe5cc66daf2d0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e92b29ac19d6a5923abe5cc66daf2d0_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
0e92b29ac19d6a5923abe5cc66daf2d0_JaffaCakes118.pdf
-
Size
7KB
-
MD5
0e92b29ac19d6a5923abe5cc66daf2d0
-
SHA1
80de20cbc45e115e876479cabccd68477151a775
-
SHA256
d9acfbf3e50e5ec075a1e0736c80cc716e26ba408f36e679dc5a2dc73187569e
-
SHA512
5ff49fa2fd3bfd8de111181d74c82c1dce32029914b86ced39a2359276b28bb6ee15eb5e8f27f070badf3a81998cb67f7428c4145b7254d5c428d677935d4f5b
-
SSDEEP
192:1oVNfJOeciKgywknbvXjxnx3kMRhU+yCVx+knFYJayC6hSoEQ:1Ac1wkbf52iDn6gaayCUSi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 772 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 772 AcroRd32.exe 772 AcroRd32.exe 772 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e92b29ac19d6a5923abe5cc66daf2d0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:772
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD553a8140b93177ce68d48bf1aefd537ea
SHA1efeac4c1db1a72f3ca0806ebd88f700e208aa6d6
SHA2568e5393eb544d3008f10495d7ab26a605f76e5aab9a7fcb51fce3fb345dbf7063
SHA51252e7135f5bef4590d2c737a4988d80e1319a0007021d7211181b6c3a5657923dc0d380d15a029da48f42c1c554ac179d75c6e7c1043a901da7282e43df82c29e