Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 11:24
Behavioral task
behavioral1
Sample
20ce72920ccc1a8b443f84314a2fda98_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20ce72920ccc1a8b443f84314a2fda98_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
20ce72920ccc1a8b443f84314a2fda98_JaffaCakes118.pdf
-
Size
84KB
-
MD5
20ce72920ccc1a8b443f84314a2fda98
-
SHA1
a79e8084763b114c13b00a405fd9e18c6c18b9e0
-
SHA256
54c9bef6b9d49704dd2a5e44b49d8826b15c43eb8c72e0d60d7543558b355b8a
-
SHA512
55c5061de67d04e02b5b344483d937af855dd3a76490d072999f220e73d8e9d5611d07c7e1d92beb0b5200dd3e799a3032911c88e4f5417b64bc88c94d82f4a9
-
SSDEEP
1536:0D5zr+QVRVl/YfbrHGX/y8Ib+a7S2QSaF9yZbhZH6W08WqSS3RaXoKWZWbpON2ZY:4+OAvNb+a7S2QSiyZ7oGSS3wX/WbNH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2688 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2688 AcroRd32.exe 2688 AcroRd32.exe 2688 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20ce72920ccc1a8b443f84314a2fda98_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2688
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52599d668497917751f8db4b30310b741
SHA1e5343e1e2d5edb5ed861ec8b96bd800be56f3b50
SHA256faa0ba6b45d7672a95ab05a41f353c9134af5734533035d7c24cb406a9ef8a83
SHA51296571660f3403a725462e1b6456c5fa386f890c5f51b0b0e61046c38fd94cf107d7bd1a4531af305788edb9814ea1107c563f42662a0e0dcdb6c5ce15eb88480