Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 20:56
Behavioral task
behavioral1
Sample
0fc391bc7848ff371beeb93b2d1989d1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fc391bc7848ff371beeb93b2d1989d1_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0fc391bc7848ff371beeb93b2d1989d1_JaffaCakes118.pdf
-
Size
81KB
-
MD5
0fc391bc7848ff371beeb93b2d1989d1
-
SHA1
87e1fb851cd715154132133f1de2ab2f200049a5
-
SHA256
8f601230518718afff5c57942681b139e2d00a9663ac24d0d56979df7656c4a0
-
SHA512
fb795e94e13b599fff7b1cc03b7b08b63e85c4a31c50eafaa8bf0aa53ba19a0c91f95824dc5d1d7d96bf89ae0c24c9384a35b9e4079fbf468204cab5bc510c6a
-
SSDEEP
1536:0Ji6K0QYUikSp2v2x8O2BnLEkh5Kn9SkPDA0w1vWapOtQHWQW17iyuk4Jq7QmDO:I/Q6k0Ws12l4kh5KwkPDA0qAtQY17iDn
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2164 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2164 AcroRd32.exe 2164 AcroRd32.exe 2164 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0fc391bc7848ff371beeb93b2d1989d1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2164
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5847d3f10adb539ef9a286d6e59b3d782
SHA17ff13f579723c9190c82f0dcaa28423cf0ff5a0f
SHA2563e3b29f8eaf13a94a14735a8e869f79c78282139df0f06d6ce2c5c7108347852
SHA512568a0d05252c315bce3ccd68011bbfeb33160a90346267c9086649562dd2459c97cc11d549add52d60c2a18a787504c7104ed6871b451badfa048b06234ac2e1