Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 07:55
Behavioral task
behavioral1
Sample
df6a4aba1bb0c144bae3bf930f3853a0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df6a4aba1bb0c144bae3bf930f3853a0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
df6a4aba1bb0c144bae3bf930f3853a0_JaffaCakes118.pdf
-
Size
87KB
-
MD5
df6a4aba1bb0c144bae3bf930f3853a0
-
SHA1
3094270bc8f03930f44959a6c405a569cca6f4ef
-
SHA256
014eb64b342acbab06892bbeeca9bc5c568311e08ad4d3e5c7669c9dd7a5cbb3
-
SHA512
b9016c09172c133447a2ec79cd7d89a1b4bafe06c419991a45f79b1ba227a198b09d66bfb6c9ee4c6a20c4875df5486dc64189f81bb99e92d7483889f46c15ef
-
SSDEEP
1536:lGeaYLcXrNGldeVTaK2RobsKsn8uhAp9RYA/pSWyhgTiyBEWcpOmhACK:MeaYLcbsLEa8b/A8iS91p8iTikvme
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2432 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2432 AcroRd32.exe 2432 AcroRd32.exe 2432 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df6a4aba1bb0c144bae3bf930f3853a0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2432
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c6108a63138210db309a3a723a4acab2
SHA19ff6e7e8636b447b65ddc038ee78c9b28129bea8
SHA25634a96d58de47a22602c3d61ba17bbeb86c37b3730c40d2f93a8a063a22d3be24
SHA5129c4fa383f4cb291335cc50ac9c58a3cc5691abf544dc4af50fc4e0d220428ba65513ab65ff24d67f79d02801bef61e5852f5518638b5336f2ce064a33bfb23c0