Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-04-2024 03:56
Behavioral task
behavioral1
Sample
f0404574c5da14ee2e56a732788298d3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0404574c5da14ee2e56a732788298d3_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f0404574c5da14ee2e56a732788298d3_JaffaCakes118.pdf
-
Size
96KB
-
MD5
f0404574c5da14ee2e56a732788298d3
-
SHA1
e59e230868cd1ecd7843fee69fc5d1f2066b2c8f
-
SHA256
f73736c2769021de75fc0f0ce64c7778e3588661856a6437b61b75c28002bcfb
-
SHA512
c0c7f9c3a2cbc9f15b74c023e7c42db6b350df52355a2d81e97c9767ea275814d67a26661968ef3082fa5536a53cab49db9776960007e7e9bfba5457168d23c2
-
SSDEEP
1536:yRxGVG76n8hWMGpAHzBE8kocejdQimI7m0bhUWUpO7qWATya632Y19mos2H:aGVG7wjdATe8koRQimIm2X7US2k9zH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1460 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1460 AcroRd32.exe 1460 AcroRd32.exe 1460 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f0404574c5da14ee2e56a732788298d3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1460
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dcd891951bf1234323743f23384d5cc8
SHA1b39c4085e48c48dfcab55e102779dbcd3c11e13c
SHA256200549105605796c49524951515af29390a1ad1078f398bc63ec73556c164692
SHA512dc1dfb43a8170109e956c28901ebd511b40f841d9d8a422835f54600eadac977872b64317b6534e3221abec7d8677f7b421f990f3fca5181a44d3eb6668baa1d