Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 08:10
Behavioral task
behavioral1
Sample
f30fafac0308b6f70effe6862bbc3803_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f30fafac0308b6f70effe6862bbc3803_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f30fafac0308b6f70effe6862bbc3803_JaffaCakes118.pdf
-
Size
87KB
-
MD5
f30fafac0308b6f70effe6862bbc3803
-
SHA1
ba7ce89fe9c4011e73ab99384248751e4545a69c
-
SHA256
5972ec56a972bc8c6b93f30b6d6596895c8f12630d2dd6d3644a0b532529e09a
-
SHA512
0660482c2f4ac22326c9745e0747202afa08bf3f6038242aa14eeba917f6e8029bcccf87a67f8c3a85d060086eb7597f0165e41a9e7860b632dc995d6babe955
-
SSDEEP
1536:Xl0NGpEVdo0/h7FFgb0CSN6PqXTwjka8NnQEwGP7qVe4W6pOu26WQdq0Ocr5o:VWFdoy1FFS0Cc6PWwQtJQrGzCeBu2ilc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2356 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2356 AcroRd32.exe 2356 AcroRd32.exe 2356 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f30fafac0308b6f70effe6862bbc3803_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2356
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59464956c0d6d9d6e42be017e2ed14a1a
SHA12612c9d289949d00744c2add33a8d76ee3824623
SHA2561263e2e292b02713ae259bb0e74f4cb5cc8c65073e2f4551bc167300568a19a7
SHA5123381749ccc731e92e8377930edaaa147dbd5932a9f35317e1ff6bac2c6a70fde7a8822ff825c75affa7e6eacc409bd13846afb432fc6211e18ab748f862eecd3