Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 08:01
Behavioral task
behavioral1
Sample
df88aab0ba1d86cb3bd039b7626dc52b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df88aab0ba1d86cb3bd039b7626dc52b_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
df88aab0ba1d86cb3bd039b7626dc52b_JaffaCakes118.pdf
-
Size
76KB
-
MD5
df88aab0ba1d86cb3bd039b7626dc52b
-
SHA1
8668f783e1e02fc752d0d624a60f402f47eeb8fb
-
SHA256
a50f4bccb23fe5e1aebdd050449a1dd1182c3f4485c1c8c3ea5edb48065e249d
-
SHA512
12186b917655b4f9f03e129c442a98ec2f83013aeeb998658df213011eeaa7ccaa33fb7bf1b2f2964e61661d03e31e3672844c07ed6fe683fd3c1fde415d2103
-
SSDEEP
1536:mGqkd4Fv89v60J5R7zveTiO7GrmWsD5yyN5Wa33JHkA1WapOtQuHwHQeyG1D:gpFv8JJPve2Oyi1D5yy5EAqtQupeFp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1460 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1460 AcroRd32.exe 1460 AcroRd32.exe 1460 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df88aab0ba1d86cb3bd039b7626dc52b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1460
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55a6f1a1ea343b797cc4715e0f148ac51
SHA15a02303bf23fa6129196df087edfc501824eec18
SHA256e03d60099c1ec2a5b952979bedf9884c06c7824e0b7e0ee397dbbc8f95f6ddba
SHA512aa3ee6f97337672672bbae5326655f5cc3aae04a272d4b27ec4b8096234fe972446ebd6385f9ec10dd3bd8c55bc4a5359cc8caa28f10b19d79809173c28bea1c