Analysis
-
max time kernel
124s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 01:26
Behavioral task
behavioral1
Sample
f6fdfe7b6e1d067d0d3240972507be19_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f6fdfe7b6e1d067d0d3240972507be19_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
f6fdfe7b6e1d067d0d3240972507be19_JaffaCakes118.pdf
-
Size
84KB
-
MD5
f6fdfe7b6e1d067d0d3240972507be19
-
SHA1
b8f4a659c57c58687624dc44bcd79aa5ef6a38f0
-
SHA256
fadda43741a13afb26ae1dba1f467aef0e9f0f17c0d5b9e5f51202fb5a85f5ce
-
SHA512
2bd526a4ca1490c2c22ba873b2b61db313520280d47366c9c5756328a00615dc000a9576d14902c060ab7caecd1112f66363fd8fb903e8d6024f2bf5f2a9b44d
-
SSDEEP
1536:V8y3TypiGJ8G2Jvu0gIbyR1tt+YU+aOC3iDvCzwoWSedWTAPonLslRCWUpO7mOu:pIJ8Dbw1tt+N+aOCyjX9PoyR97i
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2712 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2712 AcroRd32.exe 2712 AcroRd32.exe 2712 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f6fdfe7b6e1d067d0d3240972507be19_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59da40da626b9935c311a4ffb71dedc95
SHA1acf8e8e406a2308dae2533a258f6341e11068255
SHA25664a09fafea1eb67dfb045651f050d7538ef71da603ce1ec9d6f7ac5ea84db12a
SHA51270f6da727cb11f93a136fc54f0d36f8d2894bc360f0c929f2c6cb9c6b503a3358dc2f1cb90a312ea1300d611c83af01e27a212ff9e50b7af883cb913aa0faa7a