Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 17:42
Behavioral task
behavioral1
Sample
2886d2ef3529944b364a07ccd26d71a7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2886d2ef3529944b364a07ccd26d71a7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
2886d2ef3529944b364a07ccd26d71a7_JaffaCakes118.pdf
-
Size
84KB
-
MD5
2886d2ef3529944b364a07ccd26d71a7
-
SHA1
48112add9d960071637708218587dfd9864425f6
-
SHA256
8495619876904d1b257e3490db7bdd1ece7bef1f0de44603f24e6281175d7838
-
SHA512
794be957ce3eba2dbe27cdec71f4ed8aa4a298dba911348378f499f6d661c08a78b6d99ef6088f074a069d9f9e43b2d98765b6ce0ba395c0604ec325edb108fe
-
SSDEEP
1536:rjTl9uXG272taWcPDlXg5IeIR9jAqBLMJekHWkNpOPaW1OBcY5gSyZ2YEeUJ:XKD7KalXg53IR9jJBLhkoP+BcY5gSyZM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2132 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2132 AcroRd32.exe 2132 AcroRd32.exe 2132 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2886d2ef3529944b364a07ccd26d71a7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD571192051c415f1ce3ccbc4079ea81b54
SHA1a95d1707d3b298679478e854fa82ceb9ea27c78c
SHA25622b079b9b061c835e51f1b79825370725efc7697cf08fc302adc38c2fbf3685c
SHA512d71caccce0a5da9c59e76aeb7b522e1e2c1f6a0c06057937ccc9f9607719b7782087466cc7d96e9df7ea03bcdfedd268c7de9cdf37aa5e06056e34db23afc51a