Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 00:59
Behavioral task
behavioral1
Sample
f6f32e4af35e5dcaaa09dc48204854a0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6f32e4af35e5dcaaa09dc48204854a0_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f6f32e4af35e5dcaaa09dc48204854a0_JaffaCakes118.pdf
-
Size
215KB
-
MD5
f6f32e4af35e5dcaaa09dc48204854a0
-
SHA1
ff49c40925a0cde5989703c59776e412a81a3ede
-
SHA256
aa8d75510ac712090e40fbc947978273dc2fb88b559e06a53eedd031a208165d
-
SHA512
ae097ab1e576b247c104e1c15cbe07c695b7973cea377a3de682bfe06882ac42f5edb666f707877ff8e680a238ed3070b20ee3bef4e53951e40cd2a2c6f5fa7f
-
SSDEEP
6144:i3EE5j355klItL5RQ1ImG51jtf7cYq/PW2ti4qQt:i3LZ355ce0eptwYq/+ei4p
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1980 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1980 AcroRd32.exe 1980 AcroRd32.exe 1980 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f6f32e4af35e5dcaaa09dc48204854a0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1980
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59cb8dce1d982eb9982efd6ccbcf53efc
SHA15799ce8d662d5291ccf529f9bdff71b40b41dcb1
SHA256ac9b4f36349ba64722f303cd7e0675a759429e5f1ba12c3e32c3d51648060a70
SHA512f35318d8cc83e1fb18e46ba0cac2cb002dc3269f6a8d9e9c5111028ec6435734ff9dbdcf6b3ae9ed57914295b760826f40f776b80b86543f30dd670432703794