Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18-04-2024 09:09
Behavioral task
behavioral1
Sample
f7b0abb4ec955e6dce08f34d3377cbd3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7b0abb4ec955e6dce08f34d3377cbd3_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f7b0abb4ec955e6dce08f34d3377cbd3_JaffaCakes118.pdf
-
Size
45KB
-
MD5
f7b0abb4ec955e6dce08f34d3377cbd3
-
SHA1
b89ad04abe49f34f820f0b6f472b42445a7ca5c0
-
SHA256
fb7396b47434cb8080f20c3581beb7de2d04d70ccc5a26df9487124ca3ed6a54
-
SHA512
9012bfc83392a7ae5458fc5bfff9b7d9f20403cb99f6acc4ae73b7571bb268fbb28c493f58289049a10100b5d20984c5776c9220af99898ad0cee615186b0cd7
-
SSDEEP
768:j/cKYrVbAKYY9QF6NnvABAjFn/o2SHbopI+q/Ztxr69CHF:jnYkY9Dn4KF/o26opIRHN69CHF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f7b0abb4ec955e6dce08f34d3377cbd3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55ad0f36b34d8a0ad07a2921f5ecf1e62
SHA1fc24809246ebd74bcdc7f9d8138668ee7aebd402
SHA256c76e1fbabbcf49534a8628dbf10c824ef068ebb67969817b3d2d422f4435c5a4
SHA5128a385c1cc2ae5e06e6b518df9116d20855d2aefbf1743afc2c5fba5b5f2baad3a63e6581fac45508f828d54b362922172288a338add8665642adcdf7831aced4