Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 04:50
Behavioral task
behavioral1
Sample
f74d003609ecc9af143d33f6c7cd812e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f74d003609ecc9af143d33f6c7cd812e_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f74d003609ecc9af143d33f6c7cd812e_JaffaCakes118.pdf
-
Size
32KB
-
MD5
f74d003609ecc9af143d33f6c7cd812e
-
SHA1
2b3d6f9b135cce09d37256db10dcebd82726337d
-
SHA256
22839e68796088794cc1f8fe2bfb3d473887ac5098944111a3671c16235eab06
-
SHA512
e3fa7be99239e03d015f7a39c0d412d930d9f0b1ebd87805e89163d75d2b898af2097e935ed5f70dbafd7bcd9f31df682e539d7df2322c0849e8f5cb2ae1e846
-
SSDEEP
768:aOalNTLIv8e0jil9dGBJgfD8GKDsG9fDwKXb:fH8eTd0G78GKg60KXb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1444 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1444 AcroRd32.exe 1444 AcroRd32.exe 1444 AcroRd32.exe 1444 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f74d003609ecc9af143d33f6c7cd812e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1444
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ea6b8c80de291881e0674e985fe64840
SHA1e2ad7ec7f738717828b7b7e49d2caf839bb1ba4e
SHA256ac326b50fd11ce843ebb3929f5443ef616bce0f5de799f48bde14b2b0f56481d
SHA5128e4af94cdd8595b94ee7c69fcd54e41227c7f4ad5f30763489af445fee085a703af34f7a2fe015e71664fb20f56c5577182fbff54d70d93857d414450acd0b5f