Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 17:43
Behavioral task
behavioral1
Sample
f19f738f0de529aaef6fa521e6490550_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f19f738f0de529aaef6fa521e6490550_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f19f738f0de529aaef6fa521e6490550_JaffaCakes118.pdf
-
Size
99KB
-
MD5
f19f738f0de529aaef6fa521e6490550
-
SHA1
852d430db4b7bc67fdf4b3262fd4be39de3e7e5c
-
SHA256
df7e4e9b8f0f1008bc0c2886cd9903d2064362dcf27296286a656c1bfdd9f53f
-
SHA512
e5546d19600fedc469c0a8599a8fad5c97b566bcbda47f5d0364398a243871304e79917029b76d0e3a9ee150e4894c72453f625a73ccc97ec1f4931e30544297
-
SSDEEP
3072:9TAd0qJxA8+iv8y80uVIX4enn22hZKB9I:VAd0mAUv8B0p31Zt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2924 AcroRd32.exe 2924 AcroRd32.exe 2924 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f19f738f0de529aaef6fa521e6490550_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2924
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fe176b6fef10b27984b89b38a0f68269
SHA1b98fff19385a141ddffdd34ce81564fbe5ad2455
SHA2563a5beba886de348e467a82fdf5fcb1137611db023ddae0bb77e168ba0de9282e
SHA512e907029abceb4f3b6c5216f5c7032374baf49a6a7d2f3448f230a7d44b5a3b8c5ae6fb3c1b1d1cf365a1037e767eb5e79d293d77f1a2dbd7f4a47a63986f9a79