Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 08:07
Behavioral task
behavioral1
Sample
dfa5938faab7f44a55159dfc720cdbc7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfa5938faab7f44a55159dfc720cdbc7_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
dfa5938faab7f44a55159dfc720cdbc7_JaffaCakes118.pdf
-
Size
32KB
-
MD5
dfa5938faab7f44a55159dfc720cdbc7
-
SHA1
98ac6a41d81a33e63e8c3b47d9e8c99e737bc009
-
SHA256
554593f67661bd36ad79d99b2792477e9b409ea913c083cb4fdd7d17db57733e
-
SHA512
21579caa494c4afee48de92f240ad3482541a28367d1863d33e8986353a18d7f5153301b5d4b39b6524892a4938e07201ed7a26d4423cd502e521f449a566108
-
SSDEEP
768:lZMfavsYMcdUPl1DLzX5icLNX6Dwy8XNXff8Z:9IcmPl1nz4cxXXpPf8Z
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2692 AcroRd32.exe 2692 AcroRd32.exe 2692 AcroRd32.exe 2692 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dfa5938faab7f44a55159dfc720cdbc7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2692
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50de6e7513a84dbfe215efd76fd97387f
SHA17528ef0860292faad910d7be2ca1d6d38515ac83
SHA256ef5cc941496eb2af38922f7b578de1e583787ebb1cfe5af6eeeef15301351805
SHA5120b0f56fd6171533668fda1f9dc4542daf04b678aed56ef1096a7b85259b4a6c7c26fbfd816922cc8e36e38b7798a6ec7c13dbc3b36da1dcb19c14fc5066c1d4c