Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 09:18
Behavioral task
behavioral1
Sample
f7b3d6f5cb6ca4459c6d569eeec02621_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f7b3d6f5cb6ca4459c6d569eeec02621_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f7b3d6f5cb6ca4459c6d569eeec02621_JaffaCakes118.pdf
-
Size
83KB
-
MD5
f7b3d6f5cb6ca4459c6d569eeec02621
-
SHA1
b2cf9314038e0671515a61b50681ae600b42fbb4
-
SHA256
1e4426dff57038666b592aa60ff5007d2e588d5bb8638ac7c55776573a4d1789
-
SHA512
d95e0bbaa555a692c496972ba0d37cab1d28288413f60bb3cf847d2acade0d79e05da5076003bc0a0e365014fa74d7646e724f002bf2219feb7933f9c8e9d436
-
SSDEEP
1536:wmBaGRY39D60FyVlP14aK867h+qxPWDn7wwGtkmVyBlCU6/8tF4dCEuW+ln3/ENO:liBH4bB6ICPWD7w/ytQ8tOOn54wRZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1304 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1304 AcroRd32.exe 1304 AcroRd32.exe 1304 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f7b3d6f5cb6ca4459c6d569eeec02621_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1304
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54c8c57f00dcd6e84160f9a08282ca0be
SHA1c6b8e6878d1f270bf34dad3cd16a31834e9cf469
SHA2566e3ed9b79cbc115347dc7bc7395628b5e55c33a7c7285d830ed9f92a349d9419
SHA5128556596fb5b03778117c342466ea10ffe08f22089d6f67403d936965421d7272b9f0889db3ade8f6825b1af91563c188685cc32c337ebb84951f341f09930ed5