Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
15-04-2024 03:48
Behavioral task
behavioral1
Sample
f03c184530901e7288607c765e4f88f2_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f03c184530901e7288607c765e4f88f2_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f03c184530901e7288607c765e4f88f2_JaffaCakes118.pdf
-
Size
76KB
-
MD5
f03c184530901e7288607c765e4f88f2
-
SHA1
8eeb9f6ec51c5d6597e95d8e73d33a6cbee96e9e
-
SHA256
560337c98c7710c4c4e6e043978c46f519aa6bbe24bc0f390944f81adf164d60
-
SHA512
202a7b0ebd8782956c99aebe3bdb226a43777631bcd3cdaf89dee1d85a96e844e4efc049b0d1cad00845f2cd77ea7094776e2ae88afeaff5f84bdc3a26072178
-
SSDEEP
1536:GZuZU9NtHtxJcsJCI4fGyp4y2GK0ubTLQVLuk6fN0PgyKglc0f:7ZYvJFCI4Ob3dJtN0P+glT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 744 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 744 AcroRd32.exe 744 AcroRd32.exe 744 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f03c184530901e7288607c765e4f88f2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:744
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52691a58d1349693ea1d44406649fc505
SHA138a4afb9c1b0c19c3240b7fe6704a486cad590cb
SHA256ead8b6445844f6676b08d5687c646922605affa9a3a40a46cce0ddb27e999141
SHA512466c7ae12c4fbbe81be5faa8276eb4c084d6572a01c891c7b7f9c9613b252b0c89159fd3ded8858c1ff297b2ed97490240cb83f98ec40095b3e6a218d4967c7a