Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 17:40
Behavioral task
behavioral1
Sample
28814ee2cf529e8cc212970ebca6a02c_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
28814ee2cf529e8cc212970ebca6a02c_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
28814ee2cf529e8cc212970ebca6a02c_JaffaCakes118.pdf
-
Size
123KB
-
MD5
28814ee2cf529e8cc212970ebca6a02c
-
SHA1
454796713195b7b44e3eb6320e55e5b607765f0e
-
SHA256
461df431a4425e1364d46bfae450c26ba04a2af5a9a962d2500048cfab2b031b
-
SHA512
cefc6bf276ae10fd49903e535348fa914429f2cdcddd4edced6a8c6f6255593e1b2c465e7d4158cf5cf1cb8853c6180c9e38b4d3661ba941f2d1aa8cdaba532f
-
SSDEEP
3072:uqdsWNjitrtQamhF2LiCs82XyXc8vr7UskcMZV/k:unWNCbmz2LkXys4ksv0a
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28814ee2cf529e8cc212970ebca6a02c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD581d8ccb83c282526718eec2f8c183b8e
SHA1fecc3dc39d7f3e305c6c2d369e7a38d1daa8c90f
SHA2562ffbaed37b62bfa256f15b10bb4674620f520cfc43976164df9ef6cd81f68beb
SHA5126fbd988613d4c5853bca6c129cee7d2d12685f06fe557249240bf96835331657baced76a956a419eb4b047e744978a441ba2a6006f5654140aff42ed792c7877