Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 01:11
Behavioral task
behavioral1
Sample
14bfc37dd3b7c8b7601a54f083101494_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14bfc37dd3b7c8b7601a54f083101494_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
14bfc37dd3b7c8b7601a54f083101494_JaffaCakes118.pdf
-
Size
82KB
-
MD5
14bfc37dd3b7c8b7601a54f083101494
-
SHA1
0538e22e8d2947580b660febd688036f5029ac50
-
SHA256
fa6a756bd6d980f67d522e2f277889c40a2f3cb84a5dae5393771f8473b9b601
-
SHA512
e8ba14984358d85ee285a959664d07396c9a797bd14e0f307cb031cc225cf8ec31db933675eb9d2eeeb5039362aca7754b1d9266318c8c5774a54cb2ebc3b7a9
-
SSDEEP
1536:w6jHxC6aQ/o7OTBTFQRQlwG5TdDoRZIcHsTso5WX5+cr3JlZM4WQpOCALVGBom:V7xClQQ7OTZhlh5TdDYXi24iJbMnCgGH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1252 AcroRd32.exe 1252 AcroRd32.exe 1252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14bfc37dd3b7c8b7601a54f083101494_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55e7dae72a9b5ef2c1f659db5485fc430
SHA1b4bfb478846d60abc887cd55e5c4470a852988f9
SHA25623f70fe672d096fb0eef5dcdbdfc1f130fe5170142fc1d9b1dc8313a933ecc3e
SHA5124e0f2e4be3ad968cd64ba88cacf09fa6c7a8e3fc08d672ed72e7acf7b004dc58a9cad3baee35eef2b185e359990f01bb8029b72c96539125436c67fd02218541