Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 03:21
Behavioral task
behavioral1
Sample
c95e39a9210e1b897cd84af222f7226e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c95e39a9210e1b897cd84af222f7226e_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c95e39a9210e1b897cd84af222f7226e_JaffaCakes118.pdf
-
Size
68KB
-
MD5
c95e39a9210e1b897cd84af222f7226e
-
SHA1
f5d0d370516a0dda87786b7fb28000f85dcf8e34
-
SHA256
8ae65f9aa4b0778e1869dcbd9bdf62014aeacfb997fef23ba6d08610e1e38130
-
SHA512
671315d8008ea45cab824e9a441eb0b474d1b324c70d8685c943bbf3fec9b256f9180e3cbe3439d23742ea86c1db2235e37a28cec62a72014007a208ba4f77eb
-
SSDEEP
1536:4Vo95QJd36RWhJBc87+YLbLV2dmmEAA62WBtibqRsElIrgWspO2cO1:t+dqIF7tbxolv3t0qRsEML2n
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 848 AcroRd32.exe 848 AcroRd32.exe 848 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c95e39a9210e1b897cd84af222f7226e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:848
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55872e354e7fc8c25e034e9a822f89c73
SHA126728ed89861ab0c9537633edff25ea2e4ec3c53
SHA256ed1edf960ecb7f56635cb924e759593567013dc90fafca96ea70f2c908e284bb
SHA512537a5a99572a053d8a301c8c4b2abd0e4bc08f1b82451887a082827ef7e52ac916b78c19fa502728bbc1d2073f04a3e41956b3dca2b40761a86dd512d93bb3ce