Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 04:39
Behavioral task
behavioral1
Sample
cb12723304be7e05bdd43707423e50c7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb12723304be7e05bdd43707423e50c7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
cb12723304be7e05bdd43707423e50c7_JaffaCakes118.pdf
-
Size
70KB
-
MD5
cb12723304be7e05bdd43707423e50c7
-
SHA1
3a58292fb374a3b10b4c62e6450d52d93f943057
-
SHA256
b492b77a947434f664d5f05bd362e8ec2b9ad80c81e590c5d17a03fcc2a22255
-
SHA512
7495f6744be54f2070111c00c77b9b50df76f62f50d92a6afe196d230ce7e892ec933009cbef795e08865f2df9a91b845b3b32de1aa0c59de0709f49e5a3e891
-
SSDEEP
1536:zmlAMkqETIDL+xZE6GmA6gR1/xZ7Kvasz6cNPLWGpOKd8v0YKWXakYuIgO:58DLgZBNA6gRV7KvdGcNUK1YZguM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2456 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2456 AcroRd32.exe 2456 AcroRd32.exe 2456 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cb12723304be7e05bdd43707423e50c7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2456
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54ff6414a045a6368dda26edb64055f45
SHA1286070523b03e36d6b600567c0ecf3ed186fe63f
SHA256b89213be9afb41a0b26635bd531a4730892012f02b6c34f87c504947996eb9ef
SHA51299eee450baab5fa6161506c954ae0b6c7f3605483508ca03e2c078f735846760414c288e5cdeb1321368798a8dbb2983355d17606f99aa5acb35683c581951b9