Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 09:50
Behavioral task
behavioral1
Sample
1eda18fdaa160f836682b737327ee094_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1eda18fdaa160f836682b737327ee094_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1eda18fdaa160f836682b737327ee094_JaffaCakes118.pdf
-
Size
74KB
-
MD5
1eda18fdaa160f836682b737327ee094
-
SHA1
4c2f32424b1a0e48ef3af0007838c9eadb9b6471
-
SHA256
9493bbb81bd2cbdd04eedce5fb46eab5715d6a488d4f6fd9a33a05e3b114c257
-
SHA512
954972187c8839731977bda11f8df39f357fb6f96bdad821833520dc80ca5a69fa82cdcac3fa16aaf7b00a97aea1e6d0e6d9f61c1f8c4b2d3b54505e10f81109
-
SSDEEP
1536:HAZekQ0bUWsJNG/QN9xT6Y/jJeYPBS2dlOl9gz6f7NGlv2NyhsN:gZOWsHG/QNjJegBLK6z6fpGlv2NZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1eda18fdaa160f836682b737327ee094_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53608ea149f3878195d0af42a94e5c2c1
SHA1aafda319eab3a62951bf73f07bf177b2763019fd
SHA25653324e4b840430f8148db37fe94a40b95fb496ef8f3009860dac687e0065ede9
SHA512921b6cc7f0f96b082c968f137a2448da35096a105113a1155430c2754295451a16cca2050029a88eca518afe06e1959990b84aa9159b589849ac5f2f308a78f7