Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 10:27
Behavioral task
behavioral1
Sample
ed346f272cc70a15cfbd4f3336a082d0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed346f272cc70a15cfbd4f3336a082d0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ed346f272cc70a15cfbd4f3336a082d0_JaffaCakes118.pdf
-
Size
36KB
-
MD5
ed346f272cc70a15cfbd4f3336a082d0
-
SHA1
a97acbdfa752c3345463af3fdbcf0eb44ddd9a2d
-
SHA256
81a3ba4f8215c66876123a532bc8a5fe911e802c91d0afecbb1c97b2265cbadb
-
SHA512
dddd5fc649a116245bab8808034eba96b375565a870cdea15bd5e22a0e8b90935ac8225b0d9cd9e9add95731ce09fa69d6f119e6a332751f671c17fa2a4009ee
-
SSDEEP
768:NzS++WMIsYHDwGm1+PLab6wndjL4wyMpkUhcGxnY4oA:NWfcDwGm1+PLlwdjLVaoc0ToA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2844 AcroRd32.exe 2844 AcroRd32.exe 2844 AcroRd32.exe 2844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed346f272cc70a15cfbd4f3336a082d0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD537027c06da763702ffaa9c9dcf8e4f3f
SHA12c679903785df193bbdd63d253138b1f32c3afcb
SHA256c1efa1329c81e84eea5b90a0bdde86309b7d1d04a58d0a0757fdf12b76e572fa
SHA5124522f88afdcb26444da754855efc521a9526a636cf173c5e7f9415580ace4c9da8144491d2e6a1a4afe9004cdf20b3b3cdc84199b80c537188636021b9aa22d2