Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 12:34
Behavioral task
behavioral1
Sample
f381fd9197a36b14db6cda62b69f9309_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f381fd9197a36b14db6cda62b69f9309_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f381fd9197a36b14db6cda62b69f9309_JaffaCakes118.pdf
-
Size
86KB
-
MD5
f381fd9197a36b14db6cda62b69f9309
-
SHA1
9f64fd7a9ee2d4a999b611668857982ee9fd4ddb
-
SHA256
02af04148bdd740c8f6a8927ce65918fd00c1bd766f7fdc2427743b8ff840e17
-
SHA512
6f9403cb64f0ce789dfeb939885bd074d7db4a81429c84cbd9c6fa781330aa972740764aa3b50410545bea5cdd9314a1168b20a1da877c8d414627648ef45667
-
SSDEEP
1536:anJlMP4/7Tc8pwfZuw+bgyUvFXxQByepy8UJN1SJSJb6mWuTDHjTgKfX4W8pO7JX:D4UrysxhwyOSEcTDHtXj7x
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3012 AcroRd32.exe 3012 AcroRd32.exe 3012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f381fd9197a36b14db6cda62b69f9309_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD559a38b7b5827e8f52540b96b36cc44dd
SHA1b78493a09674869d2147d5f371943555de29a796
SHA2565d913a8cb37074e90d1c88942e11969037e9294c92747962e530ea6c5d1bd2df
SHA5122669d1c12701ba25e16fbea25e3f83dc87cc29f070eb56a635c70286cb455c050aa67b9573d19d46ed65e429ea0f2263bb85ab89e0238a1e6e010aeb9882a6fc