Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 00:00
Behavioral task
behavioral1
Sample
133e132f66b6a3d3618207161a0773f2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
133e132f66b6a3d3618207161a0773f2_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
133e132f66b6a3d3618207161a0773f2_JaffaCakes118.pdf
-
Size
74KB
-
MD5
133e132f66b6a3d3618207161a0773f2
-
SHA1
24bc79509a250bf9fa5eb0ba9cb1bfbb97783676
-
SHA256
80b5bfc584d51f98f478f4c55d102c5b230226c0bd44fd577b570220060b716d
-
SHA512
5569a97cfbbcddb5e6eb6cb5f1ca52e99dadbab1fd0551edfc8c5cc99c2e47b35332ffeaaa4692a9e82e5dc05c97ed49c00a8be4bbd35cc1f11ada773886b0b0
-
SSDEEP
1536:22dxnuVz8adKWbsqDtHI9yV31+zERrHzVnDjWapOtQHWAAHZCyha/rnSljm3:BznuaakssqDwyV31+6rTVotQahmSlm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\133e132f66b6a3d3618207161a0773f2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54013fc861a566c8afecd5e578a75c820
SHA1d5721f8674c94e2ef13cb802a49a6518d50927e5
SHA2566dd03c14f0d14911b22d788b828c718239882270bfbdb7983436bd9237adfe2f
SHA51278aacf6026e710ef9f7a149ef19c7b914f1b659b2248328c71fa4f7561461d827f04003927ebfdb2eed14a2289ddbd0fdbeda4510d09c7a420a7728ee43035e0