Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 08:34
Behavioral task
behavioral1
Sample
1d737bf272e30db1e3f53f5935e188ab_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1d737bf272e30db1e3f53f5935e188ab_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1d737bf272e30db1e3f53f5935e188ab_JaffaCakes118.pdf
-
Size
83KB
-
MD5
1d737bf272e30db1e3f53f5935e188ab
-
SHA1
a5832cf30c00586428e600d694dc183c50767e4e
-
SHA256
192ecf8e438df9cac133aba13fd002757ab762da321c9450c77b10a02b2ca72e
-
SHA512
2dd8e9bbc2115cf2f2b08e295527458c23c593839749f5386cb91fa449cd3023163f6942a4bf3d04593a61ddbb499c6cead0c6c27604a9ec1e8f6ccd49628979
-
SSDEEP
1536:WenEHlDABfeom7+9Eu3TD+hc6YBrPnIMHTmW92sFWVVOFzVbUmmcb1Pu4H9c6Wsn:IcBCHmTQc6YBrPIMHTmW92pRmbRdcR2R
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1712 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1712 AcroRd32.exe 1712 AcroRd32.exe 1712 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1d737bf272e30db1e3f53f5935e188ab_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59a1e2a27941edec3d25f72f923ece4df
SHA17bfe21f859a185d298020055e390c446d8b01428
SHA2563e5d244f019b8fff1183f3a1a2bdb7077310dcf5017b60b2a6b95f5aa1b0a16d
SHA512e7548de34a1c7979be962b311f729d7bc6e4931eebbb801818deee1779b3ff4ce51d6017ccfd0c812056652a2b47f0c300106b2b6e55788fecfb02755197d3fb