Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04-04-2024 16:00
Behavioral task
behavioral1
Sample
bc88d46b7a8bc4abb175061392a29ce1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc88d46b7a8bc4abb175061392a29ce1_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
bc88d46b7a8bc4abb175061392a29ce1_JaffaCakes118.pdf
-
Size
79KB
-
MD5
bc88d46b7a8bc4abb175061392a29ce1
-
SHA1
30040a9eb5a5e2656944893dcc2f19d194ed9b88
-
SHA256
4f7156a7a84eefcc369a6f7bc8099f593aee04d41ab679933ad0fc029954a746
-
SHA512
c3602b8b7e68a6e75ab6309c3d95694a5a8d264e5557dce2c7fd15e2e70a90b261e9236ae708e2276832cf7bf711b040178562bc848ed5d4af784f830b28fb37
-
SSDEEP
1536:RSr9WcojRNPAXLNDaU0QjHA+f8POUfO4vj3Kry8g0Wab0pwptI1NWspORiLP99d:mwTSxjA+wOQjWG+gpwptI1URiPx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3032 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3032 AcroRd32.exe 3032 AcroRd32.exe 3032 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc88d46b7a8bc4abb175061392a29ce1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3032
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58527d7fc0d92c1f7c3030addbb1fe72f
SHA1d90dfdf769eff667da21ab4a7bbd3fc549560b91
SHA2561a18f5b98ebf4fb486541a7bc864c990d555fdc4edcc6c04dc6dc932ca5c1c13
SHA5124ff0d5b3df4af229ce5f0ab33215ac847fdc38f93fc7e79be6a51d2a5e2b6e3c81a751df77c16b87071d0da6e9a359dc2d28028dc6662ac290ac4f552eb7e7e6