Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 12:38
Behavioral task
behavioral1
Sample
f802438cf6743330dd94f42296011ef4_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f802438cf6743330dd94f42296011ef4_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f802438cf6743330dd94f42296011ef4_JaffaCakes118.pdf
-
Size
34KB
-
MD5
f802438cf6743330dd94f42296011ef4
-
SHA1
85dd79e7c9f56c1455018f4b02d1ec1d726c5823
-
SHA256
9fc134b74bd7ce8ffd0ea098450e49120f99f516ef96fcdbc7becc3150976c68
-
SHA512
bb3ecf33a38e48b1eb936b180e0268ad3e4ae876c8f33b6bb43f91512ce48dcdae8162c9567657ae0ae7f9350f17d133697867e21a06ee6b097e02a3caa6336a
-
SSDEEP
768:K9mLVwbVubjxs8Ul3aLonurmsErcK1WX/SWTLiO:JwbVQBJLKurEcKfGLiO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f802438cf6743330dd94f42296011ef4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c48e7a353bffa0bd988d564d2b1df42b
SHA1832db2af078478336c590335e9e7d5dbedd65266
SHA25613c5cba473061c04c7e2bba5251c85c90b2840d7b00071f04e4b5e373c58ec38
SHA5120c282016a17d3f879ca6b47409de70fde77300793926258e6e78a7b6d393a9f7dd5a20d3717f7c99b8e1f4de43b45740726cc7ee35c32a2ddcadc835c8af6104