Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 16:56
Behavioral task
behavioral1
Sample
bda4bf595693675f9768ea9ef707d721_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bda4bf595693675f9768ea9ef707d721_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
bda4bf595693675f9768ea9ef707d721_JaffaCakes118.pdf
-
Size
36KB
-
MD5
bda4bf595693675f9768ea9ef707d721
-
SHA1
08e043c4095a0cee20dd7ef1c546a4b9ede2f456
-
SHA256
3036bf2c5010d3a0be2e2c09934493be4545c1927cb46b7083afd161ecca2d9d
-
SHA512
3159c8e2780950a8b93a9d8cb4bd4c9bfd53cb21e03a495c7dfad635d6bcf17cb8f03fffb3557e421f2cf731242d4964182585809db9c1ba7014dbd44dcbe678
-
SSDEEP
768:/PKTjF70J6ieDSl+9LGtFMhHeIUxMGb6rNqmailllfbLjuBw:3KTjSJ3x+NGrI8x1bdm3b2Bw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2484 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2484 AcroRd32.exe 2484 AcroRd32.exe 2484 AcroRd32.exe 2484 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bda4bf595693675f9768ea9ef707d721_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2484
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD517229b895e52d5d305d2624d82e4b6a8
SHA1768c833382b862876d7b545b6ae4fbe83a755415
SHA256c72dcb264952e47484c17a6e4941e30098c2ad6a1dd5eb6f3f554111923648ff
SHA512dd6c4eea9a9252cbfe6a9151a78f6b192ddde08c6a87044fa073654677ea7e4a2a094f7a61b3920792f56a7da8046df1a66ae57452dbe8c4659a25076111d6da