Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 21:11
Behavioral task
behavioral1
Sample
101b286c71e8440afeaa2590dd21015a_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
101b286c71e8440afeaa2590dd21015a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
101b286c71e8440afeaa2590dd21015a_JaffaCakes118.pdf
-
Size
83KB
-
MD5
101b286c71e8440afeaa2590dd21015a
-
SHA1
146bab7609dd96e9e848e601da2da66844f1c2bb
-
SHA256
c1cfb6e79e348d5f6d678cb4605c8d5c0c334c3a9f94172b43375ab166ecf169
-
SHA512
39cd08b65e655ce5350dfba52ffaf30ada99fdbda2cf7cd0b17e451575dd9e05f0b27eab3bbed0e17ee095789894b612c7d7df76e57d6c8beb6c192b68973909
-
SSDEEP
1536:6sXxxMLDjFWVTRN01tOjwbWkInM3srOAsQFEnJ3fiijqg8h1SWhF/yQUWwpOS9Wt:DXxWLvFWFRN4tOoWkyM3srOAXIfii2zZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1736 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1736 AcroRd32.exe 1736 AcroRd32.exe 1736 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\101b286c71e8440afeaa2590dd21015a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1736
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50f908a8569566fc11dcaaab1af0d8190
SHA17fface52249d97c8180d62a18a2aa13219a47768
SHA256daf490d17b31991551c4336ebd0c4820216f9f1107d0e6c4ef35413b6e860064
SHA512a32135cc318b7184bc01ba4be175759e7bfe94b1874124637da4a5dbfa9404ed74bc0c1cef48e98c6c09506a6b2c4215589843f4db9a2f4c63dfcf8c6998048d