Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 19:22
Behavioral task
behavioral1
Sample
c0a322cb79f246a8b837a465c2524822_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0a322cb79f246a8b837a465c2524822_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c0a322cb79f246a8b837a465c2524822_JaffaCakes118.pdf
-
Size
91KB
-
MD5
c0a322cb79f246a8b837a465c2524822
-
SHA1
957fc52667a49461852e60c9596f67c0b3571f4f
-
SHA256
cfb52395dc51ac84f6aaa2b71ce5113ffdc1150023f73dd1510669f33ad420d6
-
SHA512
e65735c27bde7cfa03d462d686a72d78e682ce31380f557331d91f9e7eada9fda5dae06c3b582826acfc9b99bb409f9252ce91fe5705a885d8eff2e9cb2839ef
-
SSDEEP
1536:ksh3xxJtR5K02a/w8NdFaze/SaPM5OfR/+dvKUWvEmSo3W9qNT6J+KW6pOu2yLXo:71HXKo/wOAe/Sak5g/0vKlsPqNT6+Xu0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2172 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0a322cb79f246a8b837a465c2524822_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5eaae5d6cc9dbf081010824e0e571fc65
SHA155670f89a84a71eda18cc881d5f197b72a786c7f
SHA25618ed5df65e521e4a3da7642c5e3df96ba846148763cd03a2c5b56a1507fbc5a0
SHA5123d25d5ba5cf10b7556ea096fa003aa78bfa62da10292927446db51036132df0ebb9becb3f61d9845cf4d87fc4cacf2d26a6669211abddcc91eb4df03e840cdc5