Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 12:00
Behavioral task
behavioral1
Sample
d3245e6cfe0b792930f6f2ab9bd4a1e2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3245e6cfe0b792930f6f2ab9bd4a1e2_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
d3245e6cfe0b792930f6f2ab9bd4a1e2_JaffaCakes118.pdf
-
Size
81KB
-
MD5
d3245e6cfe0b792930f6f2ab9bd4a1e2
-
SHA1
81997b340747eff8b8bf990594c8e6394cb1b1b8
-
SHA256
1fa034d9831080f2c35e1053dc63371cccfcf7d911deefb8a82777092cb40fb0
-
SHA512
561c8723ad1183b3ebcd48b56369600117ea9bbe2061087b5b623a5ae1eef455613311127b969ab871d7f71aae4c35e723144d42056cb929ca24cf6ae677aab1
-
SSDEEP
1536:qxrzh72aNVI9raCOBE622iN4DMC0XuKxzW6pOu2hl2MTCWZ5r3WNeWFE+:yR7tQr6Bm2P1Sx4u2hdTnoNfL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2864 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2864 AcroRd32.exe 2864 AcroRd32.exe 2864 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3245e6cfe0b792930f6f2ab9bd4a1e2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2864
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD565d6d50f9a5a2016b82c83fb87d52122
SHA10d66b30a769a6f33c42e9b2e7799aa582faf976c
SHA2561d65f8b95535f76394235ebb906c57fbb6c03f3579954f174b6b3a43e8eef953
SHA5126ffd3a19a1299ae48021d7410479a2a56a20affe5a6f362cea340fc7d2b8c3a40e9bd397116017f763a097f253a2d6e3da7d20832f24df86e92da5c96c337968