Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 09:50
Behavioral task
behavioral1
Sample
1edab23ec2732d4780e83eac29472112_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1edab23ec2732d4780e83eac29472112_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1edab23ec2732d4780e83eac29472112_JaffaCakes118.pdf
-
Size
82KB
-
MD5
1edab23ec2732d4780e83eac29472112
-
SHA1
20141501393d5bd7cb1f9003ae45b83a68fb3591
-
SHA256
f01b4e7a77e85172e15729b9537afe0326386126577f0094f52b4dd1845dd2f7
-
SHA512
5cc8a25a71eeccb7e9ee88bcdaf513f977d682ff301de055b9d9563b28c8db06a5572af643ea31aaf6e32af94d4610e397103aa26c7f726e32b97ab3980d1c45
-
SSDEEP
1536:3RXRC3JldV0eVTe+ZJMuY3oW4E1b9GDiD0y3Wyf4SJuhxwM9Dw+sWNSXCSIp5pWj:JRC3zHDTepuY/YiDTWyfD+GtCz5u3GkX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1edab23ec2732d4780e83eac29472112_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e5a908d831194e3e820faaa23b6d27dd
SHA18120ab30f91f3e106de3b4fd0f69c803a633db3b
SHA256b1180c973b9a2f149e1b86508eb5892f75cd3ddb90b97ea45f7bcd02d4871a80
SHA51206477ace5a444b584e6e19d1bd0d087e46e7629e75b457c8f9fddc58f7ca23ed4d035db1869dd44799811d663dff8e5bfec3e965ff0812bae4581c9275df6ae5