Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 11:55
Behavioral task
behavioral1
Sample
f3713a2d01bae1b5e7671ffd606bc817_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3713a2d01bae1b5e7671ffd606bc817_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f3713a2d01bae1b5e7671ffd606bc817_JaffaCakes118.pdf
-
Size
85KB
-
MD5
f3713a2d01bae1b5e7671ffd606bc817
-
SHA1
8f36b09a3ce46bb5f9727f22e040cd8c47f1b704
-
SHA256
fbe4af051c7a2da4ea5e444482714fa2560cc03bd2267b05ff2e71029b1576b1
-
SHA512
e4696471bc266921a49d2cf694e26af0c13426404a706e85781947734a7b82d97b6ac000859144dc5a5a92194fecab048e1f3b411d7c92d2c2cb7a8faaf9cda2
-
SSDEEP
1536:zOXmOpPEjgTKPwJLAKyjwsy65E10ghYrMMgo8WOpOwrKWfNFcMLe67J:yXmU8UmwJMZkhmE10UYlgswrxDc6eQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1540 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1540 AcroRd32.exe 1540 AcroRd32.exe 1540 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f3713a2d01bae1b5e7671ffd606bc817_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1540
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD550155d0582443530782b9cf6f6631955
SHA1a77cafb75c88694a37d36036059d2f283e646bf9
SHA25689e07a06ef556e939754a838d208e1dd3b01595d3759080974f215bf22086432
SHA512a13e8d119463eb5757d0c8af086e75eb0017da32eb2505468dfb804416b4af6473c003a62b90644af1a4a921ffcd2794cc76bf0073b84cdfb1bcef75665a386a