Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 10:52
Behavioral task
behavioral1
Sample
f3565d799a17f194d04c43b7625f5384_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3565d799a17f194d04c43b7625f5384_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f3565d799a17f194d04c43b7625f5384_JaffaCakes118.pdf
-
Size
100KB
-
MD5
f3565d799a17f194d04c43b7625f5384
-
SHA1
11180bdfd3d14fe09e0a6dea82f2eae9a3c75404
-
SHA256
990a6a4d9f98c9b0d528c60e4eb1bf146116e82d145bcaae940a9c1867318856
-
SHA512
d439c2658fbab5148cdeba29437b08cedfa56ac51ad72f6fc3ad7fdccb3f26a4148d536e3234e200541ee4e10c5b9afcf933cd6269844b693e83d52648dda1ba
-
SSDEEP
3072:ANE59bkgcjN7u8SN4Kk1OKNTU2fy0PN+1Zy9Pv7uLZyI7g:ANEnbMj4VM1DTXfT1+1Zij
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1704 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1704 AcroRd32.exe 1704 AcroRd32.exe 1704 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f3565d799a17f194d04c43b7625f5384_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1704
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56ae255e9ba2bb69b4ecd805514a51cb3
SHA18b0ce30cfd83a298a81224f20816c562f4174452
SHA256f5acca60bcf34221e3d0ad32fd702aa33422ea0a5459a59ab2040a89d0cfc941
SHA512b02402aa9a4607c0a78578511f60f1e8fc7c02c11600ef460b27a8b46cb827076e9ab80cee5122ca2a2eaa5d1446db002330de1caf03cea2e9ba1bf76be09db1