Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 13:45
Behavioral task
behavioral1
Sample
f81efaf2aee270c8e2593fb0e557bca4_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f81efaf2aee270c8e2593fb0e557bca4_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f81efaf2aee270c8e2593fb0e557bca4_JaffaCakes118.pdf
-
Size
83KB
-
MD5
f81efaf2aee270c8e2593fb0e557bca4
-
SHA1
f4d8ceda031b74880f93be03379258cb46007f16
-
SHA256
bd8f02bf7e2726ad57adf5f75f80041e8e6824275810cc0159a3dd77ecabe60d
-
SHA512
66616c76ddbacd6db707a4a3cf2461692eeea619cdbb2dd65db1d5c5528fad7f53b564b1ad2d23b74a880f2f5e918446c3633f64dcce2010cdc035a901a153d9
-
SSDEEP
1536:PNO/9REUeoUucHpAITaq2mTPDyCl02WYpO2+W06OcnKZrt1O24WKBoQA:lO/Hheom9TaqJ75c2i6y1O24WS4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2264 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2264 AcroRd32.exe 2264 AcroRd32.exe 2264 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f81efaf2aee270c8e2593fb0e557bca4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51034fa55df7e624455a62aeb6586be2b
SHA1f8683ac82c6f38d92977f4d8c84015437626b373
SHA256a91b8fce545a7cd58b70213d2ae39f52e4fe2bd5b43280e6a0e71c32ad2becdf
SHA512d9214e207d4fd55466ca8f36d97ae73e4a1348560b423d7cb75fecb9582ae6879094a83bfeaab5538af653532a42c3d5b95d93d72801cb349268acb7d276eed4