Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 16:53
Behavioral task
behavioral1
Sample
d95c1e48e93a01c3c8bb7c562ef149e3_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d95c1e48e93a01c3c8bb7c562ef149e3_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d95c1e48e93a01c3c8bb7c562ef149e3_JaffaCakes118.pdf
-
Size
33KB
-
MD5
d95c1e48e93a01c3c8bb7c562ef149e3
-
SHA1
77ec0ea6c6fcb76d9e7ad1fa2c44a7fe6c462b14
-
SHA256
3d2457d4c6c14e707e659dd5d202362d2c06a8c07ceaf9dd9bd6762ae8bf28f6
-
SHA512
24fb420c8c3aa12c993891b6b8d3d5018fa9aaee5e3886bc35830a35546a61e41957d0f1978e4f74f77a9df6e729c59bd44ca6727cd2162913929e326265decc
-
SSDEEP
768:RLullLgsZLenfdeSr6yrETfX4WsdM/stkmUdTmH:xU0Vnfdee6yrEboXwEbUdTmH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2156 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2156 AcroRd32.exe 2156 AcroRd32.exe 2156 AcroRd32.exe 2156 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d95c1e48e93a01c3c8bb7c562ef149e3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2156
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d43e9b1aea1e0cd0663caf8d911aff5a
SHA10b9bb549b6b20e06d4268c46931bf3797d7c5b93
SHA2566d22e8a06fe44cd6dfdb78391846efc09daa0274555f731e77c541eaf4d0cb8d
SHA512ed407b6a8f468308b22118fad9c37077dec26e5f5c683af0b5bf70c60aee0dc85fc69c0fa1ff314df849c8b46f363eb2cef17801c35345d5d014328c90728091