Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 11:42
Behavioral task
behavioral1
Sample
e276e2d64f0beced115ef63054251a67_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e276e2d64f0beced115ef63054251a67_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e276e2d64f0beced115ef63054251a67_JaffaCakes118.pdf
-
Size
92KB
-
MD5
e276e2d64f0beced115ef63054251a67
-
SHA1
38bcca07f4b3fdbf4446c201297893e55249e90b
-
SHA256
802459c730f316e81184c5f9ae8f1ddc7409ca9d6ceb8f6a5734fe68193c3613
-
SHA512
b90faec906ed96dae61605c3a9ee6c936ab8e17efe94dc2f56dd2c8d64281ccaa46fcf35c013f5d6a950546ea90f8c87b583c6fcb9a5c2ae04d50c92924dad67
-
SSDEEP
1536:IUXpjfOMs/pyjW2LDuiBony0BxB5E1B7H65dTXVgWCpOViIWsWT7Y84qt6K8fq:hjZsQy2LyiBoy0PsBb6ZxViR7Yl/KD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 952 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 952 AcroRd32.exe 952 AcroRd32.exe 952 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e276e2d64f0beced115ef63054251a67_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:952
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52e8b282f38b5d6252044f9e8b30a3238
SHA1bb581cda89ba3e60817805e0eb021dee1e5f8ad7
SHA256cb972b6718d808a3a796c18b4ca89f047844fb2090f942ccd8b28b57e03bffd8
SHA512f8d09d55873a9f7e2aa408570115593c6864b9be2e538a4729676af253f9a47d6e4069a08676d84bfaa86ad98ad33f85b7e038b28114ee7326c28574357abea8