Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 18:56
Behavioral task
behavioral1
Sample
c024fde31c5300ebf121da9188cb1726_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c024fde31c5300ebf121da9188cb1726_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c024fde31c5300ebf121da9188cb1726_JaffaCakes118.pdf
-
Size
82KB
-
MD5
c024fde31c5300ebf121da9188cb1726
-
SHA1
4c86eef05438600de66ffb022a62605abae69a8e
-
SHA256
85fc095fe4de9deee11d39d05f5fc8c0ccd5b96f8c019532252382681eb5ff3c
-
SHA512
8eb7b0d64a5f5ab3f3031dfa6bccaf7971ac5c07656365c4801b1e062c8da7eaa6e94d14f3a55ce267a6ee6b8a33e88f06864a9be47359fb670b41b57526393d
-
SSDEEP
1536:UzkfTZW4S6skvA5n8A/uSwgkQMHJ/SrtUWGpOK342YoNx8b6Wf2OKbufrvYcYiPz:SkfTZW4S6sSA5n8pQMHkTK3abN2Ot/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1896 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1896 AcroRd32.exe 1896 AcroRd32.exe 1896 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c024fde31c5300ebf121da9188cb1726_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1896
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dfff59be3ec707e7bcad12cc05b1c6f3
SHA11c05e7eae8c3ce4eed161481d8f254986b82cf6d
SHA256b9ce5c3352108a10f6316a3432f96f04be19102942b809888c062a1241b86fc1
SHA512594988e9d32d6a4387f7a6fe9c02f7b1c30f24510820e672a16c8546810b46bb3bc9e41f0d1945d29e6b59261c92bf6af6820b7c1764f3cac7d8fd5e805c7317