Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 18:30
Behavioral task
behavioral1
Sample
db7fe7bda30f4c10ed3dfd064803d86a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db7fe7bda30f4c10ed3dfd064803d86a_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
db7fe7bda30f4c10ed3dfd064803d86a_JaffaCakes118.pdf
-
Size
89KB
-
MD5
db7fe7bda30f4c10ed3dfd064803d86a
-
SHA1
1ed546b6958e695730970c9426b0200371fec106
-
SHA256
7a75d501bf457d6971c8c5c2498d97b1202eedb16f26d1c833ab4b6b471225e9
-
SHA512
319d2926b4262f598e484b0673317a5c614d51ce88376e03c702d82b63371927811d0d13bb17a2477528936b912c3f68de3b69724336a6c76a2421888c1ecc16
-
SSDEEP
1536:IiB/dNlxzH3jpZ5GfdRoJQtxO6RBmWqkFDhWTduYag+PWypOlLvYKa+3h0g:RrvjjARoCt/RUHkFwbv+4lLwj+5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\db7fe7bda30f4c10ed3dfd064803d86a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD581bb06f14ddb4f12571f560b54ff14e9
SHA117ce76c2c12e987fc4af7042a516c90fbd1d890e
SHA256aab4ce32a06abb74938c94c1ddc97c2b139bb2f848b53360b232f88f81a48fde
SHA512f8852e025422f3def625ee422aaf50850f0186d75592a3b8337d774119b8494941abe5a0036275ebd8af16a4a1ae32fbe4649f6b16bfed1a18525e2ff58bd0c8