Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 22:09
Behavioral task
behavioral1
Sample
f46fb9d81e80913c6b6d51a332e660e9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f46fb9d81e80913c6b6d51a332e660e9_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f46fb9d81e80913c6b6d51a332e660e9_JaffaCakes118.pdf
-
Size
43KB
-
MD5
f46fb9d81e80913c6b6d51a332e660e9
-
SHA1
74913e143cb8649a2290b69fdda704e27cd5c30e
-
SHA256
f00494d35f2af018d5a18d0cfc5d62f860e38d638fb38f3e59bed1d6314ad039
-
SHA512
e5e10209cb92cbf8979806e3eb777f6c52744c2701abad5b9b990e569ee205f23d68251cd3ac2320d722f3975546f618b13fccfbadf232ad43bf147bf14f24ca
-
SSDEEP
768:bMP6ygcZh3xYjug4VMSqfck3kUQb9twyUT9gjafSUAKYlv:bMP6yLaui32rURg+fSUIlv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f46fb9d81e80913c6b6d51a332e660e9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD524afccd0b560b4a5105eb0b0cdf3c641
SHA19339c300fbd8684818e34072350291534b2eb229
SHA256aca06c037c3265762a28f3756939a1a21d7898c393f1dfe0ae5742f4b6c16ff6
SHA512d61ada19001bf70419b4f47954866917f75657136ef7dd0b0d3ee401e895d0232edcb6f85cb7aa37322fcc4a6f6e11876350548f6073fa392e00c2a4d687a3d7