Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 18:06
Behavioral task
behavioral1
Sample
f1aa1a7be77195c1505f26857714284f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1aa1a7be77195c1505f26857714284f_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f1aa1a7be77195c1505f26857714284f_JaffaCakes118.pdf
-
Size
85KB
-
MD5
f1aa1a7be77195c1505f26857714284f
-
SHA1
4b1c8634c02c4aae3e596b5b8323cb6b61783955
-
SHA256
4c618e8abe53142fede064375dadccc6c6ad99b93f8f382daea2c3a8b702b44c
-
SHA512
e1c857409724273a916c71dcd50e53949b2a774f9c8c59f407c4540ab179f7509747af4535bbf174df3900e477bc48b05a29c5cc1aca81e58b0cde79268533b1
-
SSDEEP
1536:d85XSPYj16jyxRKRmFss49snNecVr0O2jQj4spudzZgNAylW++BF1QANNU7WspOy:oSPYZ6mRzFssdnImr0O0Y4spYgN1qCAG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2756 AcroRd32.exe 2756 AcroRd32.exe 2756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1aa1a7be77195c1505f26857714284f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD587e510809d96e91034e8b08c17ed32f0
SHA14aceb998dfcdb424a1fa58075772e4a67d2b2cff
SHA256af6bd855437c99800a1631adde4621968cb4dbce0bee82e209511b8ba7ec6770
SHA51223cdfd727095c0cc2569b1498a24de5e86e6bc44596661728f699081b6c869b19ee167c59b44e1da432a2d2f84c887fa0324ea61526b5afdba3bd20d9a97c99b