Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 14:04
Behavioral task
behavioral1
Sample
23f614b1c8a603747b2b87dba8198e60_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
23f614b1c8a603747b2b87dba8198e60_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
23f614b1c8a603747b2b87dba8198e60_JaffaCakes118.pdf
-
Size
41KB
-
MD5
23f614b1c8a603747b2b87dba8198e60
-
SHA1
61e211bc72b75971bc8d17d4d31a511cae60ed1f
-
SHA256
282265ec1ab6bd4b1d5edcd6fdb68946991941ee61f42a1953539ca6b2237c54
-
SHA512
f53b5a4384784b75524679b4468fbc5b4e4df944b92bbc6c56c540bd56072f137e861ad5dfdc3f11c89408e076304fb2296ebdc3252d4c379bffdec4b1275cb5
-
SSDEEP
768:jF/M9vAViG0Xwpd+Dz1JGD5Lz2EbgthvkKz0eJdK0uvUJ8hJSrV7Gqt:jWAu+y1J21zjuh2MdKxU8hcrV7Gq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3032 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3032 AcroRd32.exe 3032 AcroRd32.exe 3032 AcroRd32.exe 3032 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23f614b1c8a603747b2b87dba8198e60_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3032
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59f077737c662afa4d456aea1e4f9be2f
SHA1a34eb13120f0798bf822baa016faa506b5bb622b
SHA256d742217627504b852ea568b71d5abbcebe26cb519a76ca9633f2e80c13e5288c
SHA512f7f0ca93323e8f034c8444825dd07364fe43ffb945cbf87386fe000cf9866fb3fe375b7367d96af8dd0deea4bcd624a69fb59e84179888adf952bebdca8286ff