Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 10:46
Behavioral task
behavioral1
Sample
1ffd9bb978bf01fc5089534e213496d3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ffd9bb978bf01fc5089534e213496d3_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1ffd9bb978bf01fc5089534e213496d3_JaffaCakes118.pdf
-
Size
78KB
-
MD5
1ffd9bb978bf01fc5089534e213496d3
-
SHA1
4413bfdff5d84d1d745b0eb609ade48827aeeaf3
-
SHA256
cd62af46f3ca3f3e7e5b231f13e0e13e4e523ac38014b253a43035f83765d57c
-
SHA512
6e3073ea9842ff297adfaddfc28e0e8939f5a1dbbcc68748fc749d030cfb4e59acf214206fcb93da2787f4183f9ececf47ec8cb4f4dff668cc5b1e92b38aef6c
-
SSDEEP
1536:KtB924jvFgzRzzVJACLg+bnWCpOVi62pkWMa3HG4Oul3Qqf:oLxdgtzzVJACL7UVi7pnBX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ffd9bb978bf01fc5089534e213496d3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54acbab81e5ac83947cf56290b93e7451
SHA1d94f986e821d27a9d9b2d218f6fbedb5798d3aaf
SHA25672f637d74d79c42c75d97c1c43d8bc6aeacd7954131c241c216d9f9429a741a5
SHA51237ba520e4a12fdc5bf03edfbb550429277dffcc9e71638ac7a14cabdd34c732bbe611f1004fb6409bc1f3b6856977e2fbd7f3d7575330e05818eecdaaef38dce