Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 15:40
Behavioral task
behavioral1
Sample
25e25b60c57b5f00994c1a7b5f1ae3ac_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
25e25b60c57b5f00994c1a7b5f1ae3ac_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
25e25b60c57b5f00994c1a7b5f1ae3ac_JaffaCakes118.pdf
-
Size
72KB
-
MD5
25e25b60c57b5f00994c1a7b5f1ae3ac
-
SHA1
b95e43a9d34d35f221f92d963d4ca41134aebe6f
-
SHA256
3d703a68066407e676c60952588c728ed9356049d1716addf8263f94d0a6cf91
-
SHA512
bf48a981c51d2fd5c68f7675aad0e0ede9399ecff22075b5da01ef9561226d194d7d2cd64e53b91b04a0f24422a31711aaf481aa92ee1b31066b3484beb16ef8
-
SSDEEP
1536:joryjIpCwjMa15bfXph6yB42W8qh6ytdVWDNWBDeWapOtQbcMNr/:crFyaT5PG9h6ydBDjtQbcMV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1916 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1916 AcroRd32.exe 1916 AcroRd32.exe 1916 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25e25b60c57b5f00994c1a7b5f1ae3ac_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1916
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5025cafee014704ee0b5371efd610b5fd
SHA1aeb9460c38f9cc0b404162dc4a2cd45adfd5fbbb
SHA2568750d83314102db24efb731d8916755a3fc86a92096c30388183736852745c04
SHA51215442c2e89f81a935f2e4f7dd9a12b20fba00bd73a5bdfec9c8c6b1dae88c16652cba49b91577af32c7244f62af90aeb98ff59b49d25fc1447e16d599f1266b4