Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 05:14
Behavioral task
behavioral1
Sample
dc2272493ac9178f42d0ab5e3ea44115_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dc2272493ac9178f42d0ab5e3ea44115_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
dc2272493ac9178f42d0ab5e3ea44115_JaffaCakes118.pdf
-
Size
76KB
-
MD5
dc2272493ac9178f42d0ab5e3ea44115
-
SHA1
bdc94cfc6903e425c3b305054252fbb422ea78fa
-
SHA256
3ff41af89ec07f8d844277be6c84bfdd7540555eb7514a75e54a9771b2c693d0
-
SHA512
99a74df68a6e1cf17707380a693a196353e2bf2999ad0016bc0bcd1acb553a0515a4f05126bd1b15e2472895af93e76420986f350d1c8364028e61defa450bee
-
SSDEEP
1536:tZx/j9ODQ/Jvr+XYy4ndXh7ZWbpONiWylU0TGz:VL9ODQ/NrQYFdXh7bN8tm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dc2272493ac9178f42d0ab5e3ea44115_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD538bd02e95cbd9abca0ab712546d50cc6
SHA1d47d103f2e50ed3d6c89a865a1c5aec11fe7a30a
SHA25603f8e2f75188336e67d3fbdcf1de375e40f72a6e8158fb2f45426775cdd0fe9b
SHA512098a4eeaf675e5486cac8a78adec256af68ff4e911753c2fbea973d0abed1091a43461ad38685b07b72ccb061542601d084a3d280903b76ae424f55de5e163df