Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 16:39
Behavioral task
behavioral1
Sample
f3e24950bb285129ab35cb8da247e873_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3e24950bb285129ab35cb8da247e873_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f3e24950bb285129ab35cb8da247e873_JaffaCakes118.pdf
-
Size
84KB
-
MD5
f3e24950bb285129ab35cb8da247e873
-
SHA1
1eb162eb905a748ba67433ce86b2b1ba5b2bd00f
-
SHA256
791577e7f0ab610dee8469f708647654d02cc45aae87547bc403bb557dbbac97
-
SHA512
abdc5f0496245802116081aa850d89d223ca6a2f30db2163d5b623bffdacfd6b8e5550ab3cb67c91053f5efbd2ea0ca1453d591f4eb6ee6fb0cb230fff0ef36b
-
SSDEEP
1536:lEnB9XRUo3ruOT+MLbzdySVNPSQxHGzkWGqBLmLqp0YhaCWapOtQykdcVYw1AQ:g+oVT+MLVySPPLxmuqBy40Y8ftQryV55
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1048 AcroRd32.exe 1048 AcroRd32.exe 1048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f3e24950bb285129ab35cb8da247e873_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54baec44176ddcd02e42138c2e9fa26a1
SHA1f1e79ce0355b35fcbf920a8aae52e09f853ee399
SHA25670a60ca005867cfa9ce6752a2810ad754fae2eb5c8871080f27f6bdfa575c991
SHA512d4c932336e507e555262d963344ba5661debce9e7e1d3d21c19bda83d91b56fb1c7dfef4de7088a37c749571b783a830e4fd72e467676366a1d0c98a6fee7730