Analysis
-
max time kernel
120s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 16:53
Behavioral task
behavioral1
Sample
bd96edf90a5d56594e2382fce3932bc6_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd96edf90a5d56594e2382fce3932bc6_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
bd96edf90a5d56594e2382fce3932bc6_JaffaCakes118.pdf
-
Size
88KB
-
MD5
bd96edf90a5d56594e2382fce3932bc6
-
SHA1
e162d4c5d36ff1e1c3a8abc0625510f8d57b1da2
-
SHA256
0d609c162cf8563f04a8ebef7ab36a028190c1d03f3bd0ec5f51306049afd61d
-
SHA512
bcf2cab0bfa84b4a53f2025f1a2aeca6cac51e72b80d8c41392ca7415c831086535acd1357d11e2acf6dc3fd4d6f0f4ae8788ac8929df1979c457e4667e17c33
-
SSDEEP
1536:eVRYlXx6H1isYJyqyLTLdjfa3i3AoGQmFlpWOpOwrsvQFZp2WeKLS26q5p+A+:KRYB61/EyqyLThji3lTTmwr3V5pu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd96edf90a5d56594e2382fce3932bc6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a943a8cdfc920e572bfed16a320d9eb7
SHA1ea607dab2d09ffb448e6756d8c224f85bb44e4e4
SHA256d5d72f0523b27a04c3811e045a7f0f0ca8931010eb5555e9670ce130d4dfc356
SHA5123d3270f83f1259a64864659b56c83915883654d4d18a84a41ed798c02a6480593a31d8bd1ec51af2f8ce6e38fa71feceeae15ea9e8301b1dd54789c570627df1