Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 12:48
Behavioral task
behavioral1
Sample
f11711fa5a2c8886123ee10be5ee41d8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f11711fa5a2c8886123ee10be5ee41d8_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f11711fa5a2c8886123ee10be5ee41d8_JaffaCakes118.pdf
-
Size
82KB
-
MD5
f11711fa5a2c8886123ee10be5ee41d8
-
SHA1
97e454098fefe9a020b56b1f48f6890a8be4454b
-
SHA256
bef573825695327db0b43d07cd6077de4d58bb220dba13d97114e68d796dd20c
-
SHA512
e241cd6b01f68eacb69d5ce3cfba86f5c803304e6b763e54fee99e6e64a80106f48604fa7bea74e5f5af21346ba155ad49b315adf6ea254bdea09e9a995fe686
-
SSDEEP
1536:8+Ei8/zNiLuG11f6K8FlcnI5ZsskIPB6K9DmrqH1G0YVgDjPW0pr/gQpBavWGpOf:bLuzHckK8F+WLfqVgDjhrBawy6qlw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2160 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2160 AcroRd32.exe 2160 AcroRd32.exe 2160 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f11711fa5a2c8886123ee10be5ee41d8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2160
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5170d077e686d738afc455de870c7667e
SHA17f12782ec8cdc45d11924a10fa32f32ab13a219e
SHA25694c6fc746b2bf66a5397f9031503701e88e4e6e9c0c6e0afb1b251482e989385
SHA512491ee972d0b8f7c1b9588024474ad2385815c4f8fc0850e4a76b92b52a5d0a2ab892b3cb5976fa2baa8ae93440c01d0399b8208dd0aeb63386d29e4a55aeb09c