Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 08:47
Behavioral task
behavioral1
Sample
cf00d7a1bd81737742eea49ecbe64012_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cf00d7a1bd81737742eea49ecbe64012_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
cf00d7a1bd81737742eea49ecbe64012_JaffaCakes118.pdf
-
Size
84KB
-
MD5
cf00d7a1bd81737742eea49ecbe64012
-
SHA1
4c3f760bd1dacb52530d40991fb283c7e8f03525
-
SHA256
6d3cea23aeaf95d14c2c2c8cb37647eadea342cf5eedfceee7f1da840f7bdf85
-
SHA512
908f7b0eba55405c2969247911219a5e5435e51fa739d4510a9d89e385b7def04108e8d98bc3b8e34d373b631eb83c1c5e5acc9beea566e8f20024a619abbcdd
-
SSDEEP
1536:SqVGz2cBcpsiI6+Y3uJ0j/sSaVH5UxSFINbiWkMzUafQyvlYuMcWtYk0sW8pO7hC:BYzpipO3J0j/1cZAiMZzUad5qD0/78
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2428 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2428 AcroRd32.exe 2428 AcroRd32.exe 2428 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cf00d7a1bd81737742eea49ecbe64012_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2428
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f245394d7efcd72351f73d07d83c4f7b
SHA18d7ab86323adc1449c3891a986f5cb919d45f126
SHA256680fd54b72cae6dcffdba2089af6302268227ad6565098e655ba37878a153cd7
SHA5126e2306ad4a670db3f965a424bef08be2af1eaafdf6cc81b3c041c6e9a4281b661a763de70b7a2c269c51e6dc748acf73ca55a7d3103c754fb59133070ce2d26c