Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
16-04-2024 22:07
Behavioral task
behavioral1
Sample
f46f39d65b0b0f15bd22fcbd9f733115_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f46f39d65b0b0f15bd22fcbd9f733115_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f46f39d65b0b0f15bd22fcbd9f733115_JaffaCakes118.pdf
-
Size
133KB
-
MD5
f46f39d65b0b0f15bd22fcbd9f733115
-
SHA1
e9952ee11efdd74b0d57a49141fe8df713648ee9
-
SHA256
7011b0c959a8b9bc2e2fa7b5286341ee6ab35c2deedc6049159a4ca644dfd42a
-
SHA512
f09ec38c265ddf0b19f8edafec4f881c98f4f073c7d566c81c9c22ce7c0cd94fa9cab102090af80d5bc7dd351ee0e8d689c66a7779d6dbad2199be840451dccb
-
SSDEEP
3072:tF7pvj86CgQb5wLfjbIYkeuVLkD6uy21UoBi5ikaCm6h8df1:zNvj8Jhb56wYqLY6u/zBiYkazf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2868 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2868 AcroRd32.exe 2868 AcroRd32.exe 2868 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f46f39d65b0b0f15bd22fcbd9f733115_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2868
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD588f77369026e6d0308d593d579075d08
SHA1ae730c43e922457486ef65c500ee4bd5c1fe898a
SHA256efa58bbab279d227b01891f43dbffad753333304255f88924034e28107bb0f40
SHA5126cf3ca4c4b9c6d591e035d1d7a8c9c49d704c294090e482fa3b462f10edff10e13d29fb920e26cb0fac2b19a91629511e6630cb026f203ca1fb13f85c8aa329a