Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 05:28
Behavioral task
behavioral1
Sample
f06b8d1cfde09ea8055962ae7a43d61c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f06b8d1cfde09ea8055962ae7a43d61c_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f06b8d1cfde09ea8055962ae7a43d61c_JaffaCakes118.pdf
-
Size
73KB
-
MD5
f06b8d1cfde09ea8055962ae7a43d61c
-
SHA1
dd244f4a63207ab30a6cfd2bafeb57e870a257eb
-
SHA256
9514f2ebd538f782109f44c40b1a258622cace4569af0fcff5f7c1e8c7bffd48
-
SHA512
30a89380b33af35dd7aa5e6cf8cc586d09a2bebc6ecaf541d8cf3b40d7dd9ca0d040721d1534212b85a74b77fdb89f8a07270e6acd28c4c47821638b1491b219
-
SSDEEP
1536:219bYl6KY0LdRdfzzIRcUrYNZuwWEaN7eSORLWxApOG5yURh4p:IiYSFz4/YN8caQxU3G5fo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1056 AcroRd32.exe 1056 AcroRd32.exe 1056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f06b8d1cfde09ea8055962ae7a43d61c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD511193d8462202cddd63957a950254b86
SHA16e3aafc1b8d39d3e3cb258d5a782fc0e0d465e6c
SHA25641f1ad7e015f00d014ba71e38eaf6459ddd8e977973aab555e1113984c2163d0
SHA51290be58ee19339e42660f7bbd1074169c746fa92c0c352a70a1dd50bb42ebc18f1c7a741ad644e370653a88212a638d38460ab71f0cb6992284cab1c14db2765f