Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 15:49
Behavioral task
behavioral1
Sample
d7fd791b2db8b31ee9a235c7e7b366e7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7fd791b2db8b31ee9a235c7e7b366e7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d7fd791b2db8b31ee9a235c7e7b366e7_JaffaCakes118.pdf
-
Size
83KB
-
MD5
d7fd791b2db8b31ee9a235c7e7b366e7
-
SHA1
323e866c7db96a043df2d1fda5069e2387932730
-
SHA256
b634b85daa6ecfef849d84c15e70db5f44d4fcdd78d48927055adcb542abba37
-
SHA512
ac8e3b9134b0e6d87695ba6dd790b8ac594b1bb016ac469fec7710939df4c77940278a41719548ab865b629006d04f3045ae3f90eef319717bd2634b309f4eca
-
SSDEEP
1536:n6hO14l2KtN6Iscg8NODzz/xargdAcvo8x9kxUYdZ3Wnasc4i/YWUpO7Qyy:6hHlzN6IscrNAfxcgdAcARLic4i/77S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2196 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2196 AcroRd32.exe 2196 AcroRd32.exe 2196 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7fd791b2db8b31ee9a235c7e7b366e7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5817d9b74c8ccb9e5cd0e8f18e5b1e52b
SHA17cfdd3414115d3defabb82d43e285c221e0aa4a5
SHA256c2f017504c6c2cd73be30838058a4b05222276372c4b74e5ecb9ada75bc3226e
SHA512608bc81c716bdd074be6db28f9d39c5a0104317910365b2795a66eaea453ad0476d125b0de2a054e4b8092b5922aba099133de69f4e5538563b3ab6fbae48395