Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 13:56
Behavioral task
behavioral1
Sample
f138851dabd7e0b3b966dce693d1fa28_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f138851dabd7e0b3b966dce693d1fa28_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f138851dabd7e0b3b966dce693d1fa28_JaffaCakes118.pdf
-
Size
89KB
-
MD5
f138851dabd7e0b3b966dce693d1fa28
-
SHA1
38560683ee2755ec45dc47b4245d85e63684c1ba
-
SHA256
bdc236f93fcb6dc12cbdc5bfbd7abba9d72117e6d54a2ef577f0c654334dff87
-
SHA512
a607db3bd266c05350497e68040a3ce9f4d9378d4a21983f936bac2e95f27be8816b4af0a5fec423ef53d9d1e11b88f8f209318847c8345c8ad43af7ba19a03a
-
SSDEEP
1536:aykhfwLvlak+c2eHGwpSeOqbFoPo4UcsZsBtvWxd+0QqcLNW8pO+WIL:SJavlakMeH1pSeOEQfUcM2wdlO8+z
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1260 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1260 AcroRd32.exe 1260 AcroRd32.exe 1260 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f138851dabd7e0b3b966dce693d1fa28_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1260
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD546a0724362f6fe72c96bc5848f68a06c
SHA13f1862f7bc96a7c2b62684123c07eed06852914c
SHA2562cbb5e69b18f3b7f023cc47aa9fc499d8490234ecb453ebb422dddf8eb0e519d
SHA51252d52606a1467a663263b3706f8cfa05b005af6e263dc4cf888f346e9554bc8bedfc4bcd66c1235df87177813171a10a4b0d817d87044c9dd45966927f6f9985