Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 14:52
Behavioral task
behavioral1
Sample
d6d32ceda8b20889e8b3f2923c244753_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
d6d32ceda8b20889e8b3f2923c244753_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d6d32ceda8b20889e8b3f2923c244753_JaffaCakes118.pdf
-
Size
78KB
-
MD5
d6d32ceda8b20889e8b3f2923c244753
-
SHA1
1d3ab4fd801e53b00ed38caa6c03b3fe79dde1eb
-
SHA256
6e1112de1473b7764e3b931bd35ab9ca380c228d3054ec5353ccad9b16b99722
-
SHA512
a8b0843ad0e304039db89683999c79061d998f832b0ab238cdf14773666526cdeed80a437898d091d0c4cc62115c974aecf9421f649c114400adf515ad24163b
-
SSDEEP
1536:SH+sRIptuKH2la2kcQtJ0r/k9oW6pOu26WTkQq1hVopBm4U91W1i+t:cI6KH2l8cIw/ku2RkQSYB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2080 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2080 AcroRd32.exe 2080 AcroRd32.exe 2080 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d6d32ceda8b20889e8b3f2923c244753_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2080
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55432672894fe233512089c8c4f9154c5
SHA195221c9a7fa7e6ab6e3a4106f1bc13d3d82b4325
SHA2567b0a605cf137487a9fc5ff741d8926453ddc01630ad484aa61a44e287fb63013
SHA512c747dd55d9142319fe878be061b8bff078733c1d4ef613e546ccc0883bfbdb646c4e6674ffd03ae4ac69d4cb2d54f842e15ad2b1e71bffe16009ef05bab27568