Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 12:52
Behavioral task
behavioral1
Sample
227778bdf43b440466db191a016b6568_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
227778bdf43b440466db191a016b6568_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
227778bdf43b440466db191a016b6568_JaffaCakes118.pdf
-
Size
47KB
-
MD5
227778bdf43b440466db191a016b6568
-
SHA1
8f2474ff35c4da99166d5683231c47e7e0903cdd
-
SHA256
793becc3521dd97d5640409290976ea1cb4eb9d7613307fb257f664cdf8769f7
-
SHA512
6394b2e138eef3527cfe292e78a92590d2414dd3216ee326d0618faa99b48e45a823184babaf93d013be2afcd333dfc6e08ed7044c748b8128a41f935b500223
-
SSDEEP
768:+OkjYVJpW96fiD6jTMG23gMcnWZzTD8fgpX6ep5LwMa+JedrS:+OkcWlWEG2fxZzTD3pX6s5LGdu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2720 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2720 AcroRd32.exe 2720 AcroRd32.exe 2720 AcroRd32.exe 2720 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\227778bdf43b440466db191a016b6568_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2720
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d8f199506539f00b1026c02a09b0e0bc
SHA1cd758938860bb345899147623c50cd21ad7a6ba3
SHA256e992ad0b05bd0424d18eb1ec2971a4c72e63177b623b6121b411cad11dfa293a
SHA5121facd034aea89f2d892e9d298bd28b8ac471b5af1299d586f6ca4b52f3f7fbf7e7b3226ed361246e1e99c4dbab447aa9dd37e37c8d29c2ce1508b581b5068381