Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 06:35
Behavioral task
behavioral1
Sample
f2e77f32c13dced167218fb4b966fb87_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2e77f32c13dced167218fb4b966fb87_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f2e77f32c13dced167218fb4b966fb87_JaffaCakes118.pdf
-
Size
42KB
-
MD5
f2e77f32c13dced167218fb4b966fb87
-
SHA1
852655c698e3557652c263b3e6c3e554f42f78e5
-
SHA256
89512ef21dd21dc2d4c5e6409b27034065aa12f530ba0e8a48d2e209f76a9a23
-
SHA512
8c14dc2e4e400c4f7aaad64a9126efdd5618bc07b02d7b1c89eca58ec554b9c7269f56f1b57ff8e9c7325cd299c606bd1396da63dcf554c8c232ff1c42665b62
-
SSDEEP
768:ogGzpDQpeaoGfDDQUmOq6Jqr/cZV3bMrt7Mdm9UDJc3PB9kfJffFzB:lGFsp3ZV3QrbUDJOwJffFzB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2e77f32c13dced167218fb4b966fb87_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5108c5a57a5cd41dfe2414f5308ad36c2
SHA1d4f0da80026fbe887adb2a8f84331a9c414d4910
SHA256c23499018c3f59c5c8b871bdd831f793c0105409885a0a7ce25c80ff7720e764
SHA512253eab2c8ba0cbfb355b906f50c0e4b11a0b5187f8ca57fdb494ec42a86550e8cc6efdccd2a6c2ef64b05c000fcf409954ea5a32750c82a659f22b583da8f6ac