Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17-04-2024 10:57
Behavioral task
behavioral1
Sample
f59cd785d6bb01abfaf26fb27733a52c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f59cd785d6bb01abfaf26fb27733a52c_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f59cd785d6bb01abfaf26fb27733a52c_JaffaCakes118.pdf
-
Size
85KB
-
MD5
f59cd785d6bb01abfaf26fb27733a52c
-
SHA1
5b9c68448de7cb669f76f978145193a2bb94ac9d
-
SHA256
c9c2940cd2966ff7b222e333f54ef984bc8023124c61eb8d517f2a16afedd36b
-
SHA512
ac8b0e3335dbbeb337c4d6e2498087abc2ae0849151712fd93487005f5e845baeb5ea90b04d9a27d0428e7e25901bdc6ab62a011f076a826f90c73c1f2eff978
-
SSDEEP
1536:lNjDpkhd9bY31kgCxemi2LdQdnkfcW9GXh4AYHGa9irS4rz1WSPiOuY2DWapOtQg:fjDpkhSygCUSLdOnQcnRTre4rzh3AstB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3068 AcroRd32.exe 3068 AcroRd32.exe 3068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f59cd785d6bb01abfaf26fb27733a52c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3068
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD523a924aebca7f87cc86abbae95c84317
SHA199c83757df33653654cbb35c97af2ff35bab882e
SHA25649325c9b32b67ed89f10fb2f59bb2d838b6f42dbdc73978955b66b4a17260c43
SHA512eb4a0334997cce6eee7cb51290eac72561fd631fe1ae78b812469c790a80a1dbebc9701bb640b60d08af9488501ac41ae44c6e0dab3fed8c6bbd3c72c3e5719c