Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 20:44
Behavioral task
behavioral1
Sample
c24d475d94215ccbd66db051a58bda32_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c24d475d94215ccbd66db051a58bda32_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c24d475d94215ccbd66db051a58bda32_JaffaCakes118.pdf
-
Size
82KB
-
MD5
c24d475d94215ccbd66db051a58bda32
-
SHA1
e8fe538fd906b0f199bf0a9900349b0502320538
-
SHA256
1e22d0d0b3bb83d98db5d9102b2ad9d982d52a4c81258642f6a6dc4751458cc1
-
SHA512
f785f8b6bad70d8b8fe2df0f8785d0ce2d910f516d8cb22e10f8c125c255659b50b1d6ac62806eee02969b67ddd19a73ab5877fd7701bbb4f1acbde05a846604
-
SSDEEP
1536:FTC2NPtU4Mjy+snpyetrl9exf3NgoYaUi3W8I7G3Gb//cNWFr2ZwwhA1CVLWQpO2:NC2rvMGBnrb9exPwpiGXXb//L2ZwwhFd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2104 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2104 AcroRd32.exe 2104 AcroRd32.exe 2104 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c24d475d94215ccbd66db051a58bda32_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2104
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55ab1f067dc9a51a978e54e84e59a165e
SHA13d18ecf776bca006272109a718eededc99490b33
SHA2560e50c8506584eb42b2e4a2af4b89cd6e772ba75706c47dc34701bcad08a53834
SHA5125421c3de036775830fded81c0fefdf4f5137ec1def99c81512d99d066299a0902986b540ccd78decf6c6b87c8a17c0ca2b1e77c6b201fc460aa9efc331e5e4e9