Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 21:55
Behavioral task
behavioral1
Sample
f203d10758c0adc16027a0ace476ab92_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f203d10758c0adc16027a0ace476ab92_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f203d10758c0adc16027a0ace476ab92_JaffaCakes118.pdf
-
Size
35KB
-
MD5
f203d10758c0adc16027a0ace476ab92
-
SHA1
a30bf195ba95490e88beee5c575a39bf3bf8275a
-
SHA256
4384bcad64d1dd2dcd85b595c7458fb298b57f5bfd1c9566305cff735e25472a
-
SHA512
aa68e8904ecd842789d75efca2fc99937634d89b964d01c0f8ba85cc61a0cdc9cc878ef73c36598de4959929dc81b7c00ec1175c9d66926328a3258f4bb6e516
-
SSDEEP
768:qCp0o1BkIlrsU3E3gnxP+5o6ansPinuQC6kAE2P4Hh3NXE:qkk663gnxP+5o2cuQC6YHh9XE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f203d10758c0adc16027a0ace476ab92_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d42c90ccb17d20eca0da25dfe23bd20b
SHA1c8085ff88ecf96a24edfc4758dfefad884667e2b
SHA25635be926dec13c8ef06c9f53f47a703196b1f7170f5233f00559d4987740000cc
SHA51245a3583c49d431d17caa2627f5e81a12b83de69320a4d14cf210dca5a7197e2079ac607f8d6409605574cac44e0382e439c144c4589bf1e02b8091deedf67169