Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 04:26
Behavioral task
behavioral1
Sample
1859340330b589eb249ea5b21ef55ec6_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1859340330b589eb249ea5b21ef55ec6_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1859340330b589eb249ea5b21ef55ec6_JaffaCakes118.pdf
-
Size
87KB
-
MD5
1859340330b589eb249ea5b21ef55ec6
-
SHA1
a4bd0ae4457fe51ee4c50a7cd29270ee5f8b7445
-
SHA256
950aaed3d2cd9b7e47a72a78d261ea2d84c0d9444483c5ca18b9c9597c92b501
-
SHA512
ba4f7bb835df54f1f7246f50c413dbc21c8c8b0cf3f1b9188742784368eeff9af1f45d384c9c7c6df949cc3ccae0a98d9f2822c0131c7b75adf37d24429de552
-
SSDEEP
1536:9cJ7+xKMbtZPTp8oTRQstPhDnz4gSDhSyHK8A2Q6b+LWkNpOPaWUPqMD/FVs6Wfh:+pYdZN8WucPhQNy8A2QKPif/FVMfh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2924 AcroRd32.exe 2924 AcroRd32.exe 2924 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1859340330b589eb249ea5b21ef55ec6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2924
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55fd1c5b2abbb80c3903f76c3e27698fc
SHA170fa904a2b870d11606b01457589187599c1f5ad
SHA2568e135e11c7ec0d69671fc88bf31735fe6cee858e5fbf321b816f24183f63710a
SHA512c68df17ef88249ca9c14a103961fd0723cdb25106ff704e4ce13832521ccecc0f68716cb60e201eb3f900f3b0f59bd77ea675273be2aeeff8c9f49077b6e0578