Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
19-04-2024 00:40
Behavioral task
behavioral1
Sample
f91e7eac56fe41c61d042633e06aa623_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f91e7eac56fe41c61d042633e06aa623_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f91e7eac56fe41c61d042633e06aa623_JaffaCakes118.pdf
-
Size
57KB
-
MD5
f91e7eac56fe41c61d042633e06aa623
-
SHA1
568e30209061bfa98605e5d64a1f5fc622ea47ac
-
SHA256
6f6eec589fc7864c14eaeddc62110f2ed5e719320db5a2748e8d73e8ae7300fb
-
SHA512
4af135829f322acd86de75ab8a575e9edc922f489ed4e33d3704b5f9f85096282451fc2a4af4096653d1f8e34cf959b7b6637320b75fad3482dd56d08063fd27
-
SSDEEP
768:ufynW9rXkYtZ4QI12woyc3tI3SycMHO+ypuPSUqKvfQGaOGLLA4Xb190Ub1W7brl:ufyCXHa12ayI3Hc5TaqKHMOW9uTCynGE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2832 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2832 AcroRd32.exe 2832 AcroRd32.exe 2832 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f91e7eac56fe41c61d042633e06aa623_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2832
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD555e3c81435fe8ac3bb6a953a0089569d
SHA1bdb4c6895c9dd3420e5d1d8a5d41d14cdfc5304c
SHA25664ee5e2711526125e64ed8acffbe939c7053d1cbce625855dc58071b1524d0e8
SHA512300a0a63335d5cf0235067e8214c72e24605864ff4ea32d7ab437b7109c11cade35fc2c84b3b6201bb17cbef30b918465cf4b7b0e565ee9bdd2e20f2f1df0a7a