Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 09:27
Behavioral task
behavioral1
Sample
f577b9308c3f47b8a3c87fda3057b8f8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f577b9308c3f47b8a3c87fda3057b8f8_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f577b9308c3f47b8a3c87fda3057b8f8_JaffaCakes118.pdf
-
Size
42KB
-
MD5
f577b9308c3f47b8a3c87fda3057b8f8
-
SHA1
2e28b67615e0a20cd32ab02c3979b992ca6ad7da
-
SHA256
c976d86aaaab0ad32e662d53f8fba508eb8647af2138a8e6b3b2b739269c090d
-
SHA512
40b20f22f4885e2a37c47e1d8046f90614af8480c7a9c2d6d306a593f7c9dd3d8228de163f1daa9aa35b843ea3f28cf620d6e08ce40d8092296ed36b7a045b10
-
SSDEEP
768:GDOemgp+CLD0bKpDwOWvg+721nJYW5xaUjQH7/3SOAhbyhCXtI5mkj/Wh:MZd4bvjS1Vmr3SBhbyMXu5mXh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f577b9308c3f47b8a3c87fda3057b8f8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52defe2fe1803868a4d955d1b6ca33687
SHA1e110ab47ed7c53cd6cf5425af1995ea5d2ada76d
SHA256c4556b62415e4bbd1c4609edd197fbbf1d0d2c2068592646c78f6cd2c972d2df
SHA512c306b3ee93bd0cb60b2689663f5a0135b7aa15f3ba3416809ae5fdcfe74403f11102d2f6f25e783aee964ad54e33e4fda19a34f5ca18abfe31dd6a8599e8faea