Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 19:17
Behavioral task
behavioral1
Sample
f1baa5698b83a0e168c277f62b14ca79_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1baa5698b83a0e168c277f62b14ca79_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f1baa5698b83a0e168c277f62b14ca79_JaffaCakes118.pdf
-
Size
69KB
-
MD5
f1baa5698b83a0e168c277f62b14ca79
-
SHA1
f05e54de1ff2278ab059a36ec6c296e1a4f3f01a
-
SHA256
5766183cbfb367d30faf18c7dff1a859a307abab6bddce32bba7cc462c5a7124
-
SHA512
6360d5e75a23b23115bc40620421ac64a04026fc7ecb7583995b6dcaae9b9454b16193916186c0a585487f317cf68565bd8d6e37d9dce50bd5fde283b8ad625a
-
SSDEEP
1536:HX2C1tgTWjpev7vyCjb/VRLSUVKSy2X2OSWWKn8QG+DWQpOCRq/AtmymmQ4:ZtgSj0v7vyu7TLSIFy2X2O0O/G+uCb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1808 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1808 AcroRd32.exe 1808 AcroRd32.exe 1808 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1baa5698b83a0e168c277f62b14ca79_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cd6d28bd356d796caf29bc486dd663c3
SHA1d7c3fe5faa65c560c17e6a2b2a91f25123f1522f
SHA256398989e2fa31c46dc61b07391565478ea8abcb014f5185aede1a6aeef1bbd1b7
SHA5125564ffa1438af42a04059d00579af5035f31e5e905fdbc65a5f205a8553d1b63b960ed61377511067294d421458bf447013595c3932685d132e45665c8a2e2f1