Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 22:20
Behavioral task
behavioral1
Sample
fb4af3e394b85fec7aa2cb7b215c7b0d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb4af3e394b85fec7aa2cb7b215c7b0d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
fb4af3e394b85fec7aa2cb7b215c7b0d_JaffaCakes118.pdf
-
Size
74KB
-
MD5
fb4af3e394b85fec7aa2cb7b215c7b0d
-
SHA1
37e3c351c4a7c01ec35732f22ad08250b0c0e81e
-
SHA256
3d5249abffce811a4179d6ddae6a63c6e9312f25772bd0f0de77c1efa3b6f1ec
-
SHA512
76369619f7f5dae5d76c13b461048e9422bf06d01becd130ccfaa3b0b112eff90045c0dd347e292fc6fcca994ecf7baac018dc2f1eaaaafd4be2769a15315074
-
SSDEEP
1536:j23jakO5UKrh2yMETtZL/fsWFd6lW/+AtWLWapOtQOjc50uGu:6OkO5Uwh2/2lXt36fAcEtQOjcG8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1132 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1132 AcroRd32.exe 1132 AcroRd32.exe 1132 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb4af3e394b85fec7aa2cb7b215c7b0d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c96352528727a69b148e136b43a386c7
SHA145081b6c81c5ce837d2a823c3c029dfdc9af5e86
SHA256a9e2402304e284bb59d41704177f05db04e52c8bc3ac74b2176f1df3f5f963c3
SHA5122d92deeeadb16c558cf8505e97e87818afc143801c0939a8da5de0815e2d43e894cd1329d497544b7ec5958e270aefff53f75a17a6e5fa7fd179ffeb4042af3e