Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 08:47
Behavioral task
behavioral1
Sample
f5664fd2d1f808f7b474ac2b2039d1b9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5664fd2d1f808f7b474ac2b2039d1b9_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f5664fd2d1f808f7b474ac2b2039d1b9_JaffaCakes118.pdf
-
Size
86KB
-
MD5
f5664fd2d1f808f7b474ac2b2039d1b9
-
SHA1
eb096baa890883e4e5e857b80b72bd91bf43958b
-
SHA256
8383a4e49cfc9f10f56790f84585f9f5e60f0a058b642ccc4a429e2ffa646ce3
-
SHA512
465003f9c484d42b913375dddc7ddfd948ef1c425425737ac26dc76807b7d22b1043cd975ceee2253801d5bc980753a1adb79eb4194850a817bc48893c8dedbc
-
SSDEEP
1536:7Sij0UZaGAgfqMF5NzbV7P4f3B3ubBxgN7MuL2dYkcG1YvRu8Mc6EVmQyoHZWOpX:WiowaGA2v/N2x3m2N7ZL2ajvmGHWwrCO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1660 AcroRd32.exe 1660 AcroRd32.exe 1660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5664fd2d1f808f7b474ac2b2039d1b9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52624d71fb556982a24fafa99a51da1d7
SHA1c7c926f67407b0e784afd9252da9da64fe1bbf2a
SHA2563d9b4da2e322614f0d467db04335fc7264a90f6447d60f08fc0eec026d1d9f9e
SHA5127f7959247209f5a43e4c8d7e04195af816752c0ca7796bcc16397c5e4549d3b8aaff371cd0fd595e10ecd7e787ceded584f50daa52dc7b2ad29de79b14670bab