Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 07:18
Behavioral task
behavioral1
Sample
f785e939adf59e722e9dc903589a86e5_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f785e939adf59e722e9dc903589a86e5_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f785e939adf59e722e9dc903589a86e5_JaffaCakes118.pdf
-
Size
84KB
-
MD5
f785e939adf59e722e9dc903589a86e5
-
SHA1
1dacce1643230bc9e41c5ae4ba49ad2b044a1c86
-
SHA256
39dab15398e4e841aa7aaf1f0963b316b052210ab0b9aed360450097c291f28d
-
SHA512
6e302c9a2066730290106933e99a504f3fc3ea70d7ebac3874325db709741b162b681111dd354f1bcdf4e77a7415ea6cd4580bf97eecbfd6305576f46ee1e08b
-
SSDEEP
1536:Tem8/d+ADS33fLBF3iUXsqlpPXoLgeWWNb2SihPWjWOpOaZQTqA+g:KmQAAW33DBF9cA9oLPshe0aZIqS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1988 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1988 AcroRd32.exe 1988 AcroRd32.exe 1988 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f785e939adf59e722e9dc903589a86e5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1988
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e359415efad32fbf0016e63a3cdedc22
SHA15878258df37bf96d3ffd512c9cf19a907b173a23
SHA256331c1c0c8133bd5dc96ac2666c7a0ae261fba120eed46bd4b8cccf74e52851ea
SHA5129bf6a48da6514346e4296f4cc4df45f5f97d05a74e014081a43098d63956832367fbbfdf009c3286d378708894dd0463713d1acdf2d14f208111a88fcab89b50