Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 15:21
Behavioral task
behavioral1
Sample
d76c669d2034c567a330d5c23f52bae3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d76c669d2034c567a330d5c23f52bae3_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
d76c669d2034c567a330d5c23f52bae3_JaffaCakes118.pdf
-
Size
75KB
-
MD5
d76c669d2034c567a330d5c23f52bae3
-
SHA1
823fd96783dcce58482b5fcd4b4721eb2e56c357
-
SHA256
e83283d1523609a5df7791052a5b2cdf33e64af8791eb7395e9b86358980b25b
-
SHA512
19786128be15c58953791768c56ee123bfc08230a2034cf4a95a60dae5b4cc52d2e67edbe085813755018bded06ed43c6d58b23960b38228125af4884e3dc69e
-
SSDEEP
1536:2K8rvUDh97E//ptYUVZFfbVP6Lo8WT4l/69mxyIEl8LWQpOCt35:BiUlte/UOFfhPRwxwmxdA82CD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1812 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1812 AcroRd32.exe 1812 AcroRd32.exe 1812 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d76c669d2034c567a330d5c23f52bae3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1812
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53ac39954ad31ebddd4f8ad2bb11e3acf
SHA1873f3f1b057de7c7b16f59876c753e545244c46a
SHA256a94c91e52b8b63181ea052625bbc5132341dfebed1722bdd66b7926ff468ed41
SHA512df240c943297916cf85d1c3236503af72a4e0c9a79ef485c5b60a83b584e9473ac63a3fe58a2aab5c3bff06872b504a49fb91f05029257b08d12fb6147d63647