Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 20:07
Behavioral task
behavioral1
Sample
f1d27dac1042902fd2e4a1652c60f632_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1d27dac1042902fd2e4a1652c60f632_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f1d27dac1042902fd2e4a1652c60f632_JaffaCakes118.pdf
-
Size
34KB
-
MD5
f1d27dac1042902fd2e4a1652c60f632
-
SHA1
51066e39e812f0937c2c6db319794542a3756316
-
SHA256
a7b17c7de3c976545485f671f33b49400fafc65e64ab0137d1f05c3c1afb3c2f
-
SHA512
159e4cf2e2c2af215db79737310ee2b59e7168a6e11f8b05bf4bb116428fdb5710dee7de757e59cb5dcb1a9837bd4b2f49a72c7e0b43e45362e77b2ecbb41e8c
-
SSDEEP
384:y9oO0lxMpJoIBK/QpsNeqdHkJi4/HrwO1NfOHFkVFqCUSPpVNtnJ/Mg61DaP+k5K:yvyx+oa8Qps7dHkJiUrhkkV0WVZOaGYK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2804 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2804 AcroRd32.exe 2804 AcroRd32.exe 2804 AcroRd32.exe 2804 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1d27dac1042902fd2e4a1652c60f632_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2804
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a97473798ca4a2d793bf8d11b5bb0ec5
SHA1c75f61d35e9d1f8920d84e3f61ebc67612473663
SHA256b41195efae185b14d669fc91debd042af7c2b28a6cef8663b6ccc13b68b0a3fd
SHA51299694a0e9b84939ea82de5ebd801c27e18e35d339bf9bb2a9a80137cbef75637dedae4e6a2045da911f8692e6e374a10573f16d23a6ced587a819678eb240ba8