Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 14:28
Behavioral task
behavioral1
Sample
247128f5d8647d4eaa4cb80a4dda0e28_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
247128f5d8647d4eaa4cb80a4dda0e28_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
247128f5d8647d4eaa4cb80a4dda0e28_JaffaCakes118.pdf
-
Size
85KB
-
MD5
247128f5d8647d4eaa4cb80a4dda0e28
-
SHA1
04d03d0986f2565fd9c29dfe38dd13184ea255e5
-
SHA256
58bd941163f8939564fa00b4b769c2d13b4ebb6bf3c165bb7d8e8bbe6c49875f
-
SHA512
fd5e027b7dda82b85f5c9573268df8d87dd89517dc46feeff2c67aab01cbb6233dfdc6cd3d46931a5d81688a9b2ce647834b8a8c95a39a7b7d717d750d261345
-
SSDEEP
1536:5q85TXW/STX7tAY004h+AaD7yUOW6OHhsuXVeuOsJ/WcpOm7tp:zmG5AY00CU7B/leuOmT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\247128f5d8647d4eaa4cb80a4dda0e28_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5789f92172abe1524cd43136004bffe3e
SHA1d8d1218180f520c89e752052603c3f8e964f5a32
SHA2567ab89bd8c8abedc5dd90f248d29f8fc0c32de1957342037150c389a6bdcfd0cc
SHA5128e10ccf3cd9c955f1709d5a5239adefc2553d3e098df4032f8d4cf318a2c4ff3c7253b3a64be59fc3976ae5146829769dccc91f1d0c060a12809c09977ce3de7