Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 04:34
Behavioral task
behavioral1
Sample
1884184abe97b3457e8d1eab2542181b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1884184abe97b3457e8d1eab2542181b_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1884184abe97b3457e8d1eab2542181b_JaffaCakes118.pdf
-
Size
87KB
-
MD5
1884184abe97b3457e8d1eab2542181b
-
SHA1
0ee0f93550a614b355d391f8b6fc67ca22d80577
-
SHA256
c9d8fc04be85e44e4ce64245273ab93e009950a8a3216a78d50f606c3e85e852
-
SHA512
87bbec8a909200b5b95013a946f2a8ef317a91c817b8fe1fd67155039a43cce1a0c9a5f6c3a7a7904bcaae6be5df0de73fa1a17498d7deaf4a189fa608f95606
-
SSDEEP
1536:npxU5cjbsZnGpxtPW6fIaTzJ/gk/mVIZW4Hwe2qGCifWGpOKOVb1RDvAWhw70fEx:pbbtxAGPp/moHwxEiAKOVLDvZw4fIoc1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2768 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2768 AcroRd32.exe 2768 AcroRd32.exe 2768 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1884184abe97b3457e8d1eab2542181b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2768
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50198fe7eccf35477fd09fdc23aed03e8
SHA1d81596faf6c2a8616fe7de57e2487401207d5780
SHA2563fbde340ffcf05d4c7f3be70978f9a0515ae681149ffcb0255b50ff07f6506d6
SHA512a396e24bbe1cac211ba6cf6525ea6ef5b7be1ec3dc30c97a65b66d9730aaa8fc31bdf255986b08a9dbf1f7916ef1217c8f6c9384783b664f61691297eac213d5