Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 10:49
Behavioral task
behavioral1
Sample
d1a9623214f6c91dc6b2898b2d3807a3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1a9623214f6c91dc6b2898b2d3807a3_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d1a9623214f6c91dc6b2898b2d3807a3_JaffaCakes118.pdf
-
Size
46KB
-
MD5
d1a9623214f6c91dc6b2898b2d3807a3
-
SHA1
39f0334b5a2234586d8f7c155c325ff00d2fee49
-
SHA256
3fc85fa5c0e61aeb5cb6092bcf4e8e443c74ab05624bfc1c08eec7ee001736ad
-
SHA512
60d3fcbc23920014e4b8b135a1baa852435b3f0b1856725dadae9ad714a75c2580ffe39e9a60121258b29f2c852c036447eb0107266bd76677e8e3621674f276
-
SSDEEP
768:XXghVkT2KS++zXHzqUY+M6aBablFXgp54lo4sxyMv:XXltS++a4MGIpydulv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1412 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1412 AcroRd32.exe 1412 AcroRd32.exe 1412 AcroRd32.exe 1412 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d1a9623214f6c91dc6b2898b2d3807a3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1412
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c445854e236537907d12a096ac98d562
SHA1a4b0a1f96879919b01f857ef18b6130df529fc0f
SHA2568b7db3f7e529abe258c701b8958b5d0e88ecc8f24d73f4db2110a608a7f22ff3
SHA512a59a9ea794786ebac2567de19efd39acc7fffb64d76407068ccedbd1862c12d94618d08456ee5972689a7dad31320247f350de90243e0db03f10941b009289c8