Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 14:17
Behavioral task
behavioral1
Sample
f141f1c9d1fa95f2cf3d4a0ddab1d0fe_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f141f1c9d1fa95f2cf3d4a0ddab1d0fe_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f141f1c9d1fa95f2cf3d4a0ddab1d0fe_JaffaCakes118.pdf
-
Size
126KB
-
MD5
f141f1c9d1fa95f2cf3d4a0ddab1d0fe
-
SHA1
ef9ed3f3a880313b59bc774e6103f8becb0e4679
-
SHA256
71f06063204cafd147a9d7ee68b28c69a9478983508f68ef93b1a6a9341da2e7
-
SHA512
2cdb77f58b0f4514676066869f8d3f1f5935dc09f246dd59c29ae6791a58474f65fbfb251d22ac3b682a3af88dc59c038cddc25cd492bb743879152e44b0912f
-
SSDEEP
3072:/jItp+QJgETCNjwlMFULCTfhyeTdumWuP01M/fcO+R3yRZf:Mf82iDe+Tpy45Wb1MyRiRd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f141f1c9d1fa95f2cf3d4a0ddab1d0fe_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD501d5a156483a5f0ed5d95b79eb6a4e26
SHA17fabe58b12a6bace9cd83ec9922cc8817e85a881
SHA256f4f4bfe8bac55a8d9b13b6588d4d8d1a55c0a6fd8fd8ecd157700e5eae8823a4
SHA5121aeb3e54ca4a06b2eb9eba351f7b06cd678d23c08ee1450605b48953e1806405183b12c988274e0f90e5b15f71a9bc8de2388ff4af3271e1e3a8d888cbd6d9d4