Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 09:17
Behavioral task
behavioral1
Sample
cfafee83bd4ce01dc7cab9cd71f1413a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cfafee83bd4ce01dc7cab9cd71f1413a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
cfafee83bd4ce01dc7cab9cd71f1413a_JaffaCakes118.pdf
-
Size
89KB
-
MD5
cfafee83bd4ce01dc7cab9cd71f1413a
-
SHA1
1cbe40b19cee5c640af913f66ae9bf1905f09fc7
-
SHA256
a1de8f9c963dee1ef60f5db3e6d2c385d552fadf65ccf17533bb0f7e6973c68a
-
SHA512
5bb1457769ab87a073d7f5efad4ceeb49843b3b454518d45aaf9f389db446a6ac9c88d393895e1acc03439b2fc9f32862bc7db5fab03123677ec43251d147a53
-
SSDEEP
1536:4QiL9YQPwCPWyWB2sOYv89cYt7wd/ByyLP876lG7V4AD/0n0WzFiy06WlxyOLlC+:D69YQPTOWt7wdpy6P876gV49nh0nxyIL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2092 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2092 AcroRd32.exe 2092 AcroRd32.exe 2092 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cfafee83bd4ce01dc7cab9cd71f1413a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2092
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5106a2a81281c209cca6ad4d85e52aa3b
SHA1a7b166c0d40c4ba2d08755eba2f5986e9345b078
SHA256c5d24fb8b45e3d5375abb3db2ca2899f2050a2d9ea8c04295c014021dd6c66ae
SHA512863c36b838e78dd9bb5107ec231ff50d86ef47e2296a13a48d6f340cd903b685063bacdf685bd7d039674f5cdb24c0f09d07e41938a174d9d1c13a707197afac