Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 00:29
Behavioral task
behavioral1
Sample
c5efc870e5f4fe00eb006f88134aa04a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c5efc870e5f4fe00eb006f88134aa04a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c5efc870e5f4fe00eb006f88134aa04a_JaffaCakes118.pdf
-
Size
77KB
-
MD5
c5efc870e5f4fe00eb006f88134aa04a
-
SHA1
53c6792770bd8cd2e4e7680cd8fb33cbfaa19952
-
SHA256
317613e810abff72d0114ff86565cebd49f0c37ad81522296e640a18d43d3b6e
-
SHA512
cd82adee9329a2a210611af30936a25485dc7c5ae5038981811f8a73393ec64487bd0b74b83c71e831da6aac7d74f642905864ee65dbb271489d64cbcc1c5d64
-
SSDEEP
1536:VVJMhgXiJyX68AVd4GHfgmwcX0urj2ZLN/Vjcc9MWwpOS9Wgkk8IeLOWZqf2:VMyX7vA0n0Em2xN/VL9rSVleqWj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2172 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c5efc870e5f4fe00eb006f88134aa04a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5df770f3b3c56921e936a72919426efb8
SHA18d0de08e82714620d503a5cf38ca12bb99cb0c8b
SHA256b82337de3d701a4a993721b642c62ded2bc7f9e91c61349216a1031799d278ae
SHA512d3d37790f4f9c77b6049804cf4e3531768645d0a16a11f40d21d9e7ae2acb822870a1b57bbf4b1b1f7c5e68263ddbf12c1debc587d63575bad142e1e9d39f2f6