Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 06:57
Behavioral task
behavioral1
Sample
1b8e5fe6f539c6fc4c072bf183b34e41_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b8e5fe6f539c6fc4c072bf183b34e41_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1b8e5fe6f539c6fc4c072bf183b34e41_JaffaCakes118.pdf
-
Size
39KB
-
MD5
1b8e5fe6f539c6fc4c072bf183b34e41
-
SHA1
0f73743b169fdf0f89e68ca3217e091ca0ff1656
-
SHA256
143b434ee34d5a405eafb198ffca2b957ae856f1c3e51ae3cf891219f9edbe28
-
SHA512
e11d55bd9b8f23ff900bb9084dbfc83898e9e6f506b80f52afb8fefc19b6d1aa498e3064b3cc8d9de6504634c078ba18bf87b992d34805c9761e99f291469351
-
SSDEEP
768:F3cOKQT8p1FoPo2SKRmVuDBTr5YFutGO0Vm/N0N4NYW/tb293u2ls:lKQaFwRkUDB5Qu70gaNod/ps3pls
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 884 AcroRd32.exe 884 AcroRd32.exe 884 AcroRd32.exe 884 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b8e5fe6f539c6fc4c072bf183b34e41_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:884
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59ac6aca38282c4598e99f631f5e426f4
SHA18d84c73480cb4f623145293e52e161af37622481
SHA256863395da13a014fb5c6eb7c5c587ce93a272669971969adc769c9c376f3403f0
SHA51273f52e4aa68f39d3cec32f5bc51c9187d6492a0eab555e3c4eb20e88a31e7af734de9b8edeef10f8c300ed442d752d818c48f9016fcf7d731ed4ce5d9e32cc24