Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 05:33
Behavioral task
behavioral1
Sample
f2cb3872f6baaa42fd9ce3b3fae59459_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2cb3872f6baaa42fd9ce3b3fae59459_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
f2cb3872f6baaa42fd9ce3b3fae59459_JaffaCakes118.pdf
-
Size
82KB
-
MD5
f2cb3872f6baaa42fd9ce3b3fae59459
-
SHA1
c40f2bd33e109e6b58672f3bac617882aa0d935c
-
SHA256
da9abef31efeed3201e2cfbfda3b484c6dc7ef926320c15dfce34cfb030931fb
-
SHA512
0faa960fb4ec55ef07996e5c5357b2bb28adc9e95291655c4903afe21925adcc6390ca62a29c474481c697ac7d8c5e9fa2b3a0b298ed5f5a31be658022fe458b
-
SSDEEP
1536:6x2Ri8IBPx6l+6j55veSmRs0OgjGLRcLxyIfgoCiWspORGWDjesUV:02RG1x6lLURBfiGdBooCFR9eB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1728 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1728 AcroRd32.exe 1728 AcroRd32.exe 1728 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2cb3872f6baaa42fd9ce3b3fae59459_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f81ae9c06b95733a224f3768ac9b277c
SHA16167a78f1e3fbeb882099183e8b0d7ddc3fb4677
SHA256ccede88157820d0dd7679453f11f745143c2b0e6730b854465f4898c159fef03
SHA512d5327aca2a1d8d77c429cde63db3d6c7fdab4ffff90f554f9775563cee2b4bf364e071f8bb210921e58bc806531f323cf0a6155227e62b851f3006180102226d