Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 00:30
Behavioral task
behavioral1
Sample
f91a062453358d4bc372ed812198f189_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f91a062453358d4bc372ed812198f189_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f91a062453358d4bc372ed812198f189_JaffaCakes118.pdf
-
Size
33KB
-
MD5
f91a062453358d4bc372ed812198f189
-
SHA1
814521b414cf021c227505ea2f864e093d299717
-
SHA256
bd8cec527b31ea00acbe046338e2001d4df159192baea880b6e0451931ea2445
-
SHA512
223d814b598104b26f450f9ff5a6a44c13c7592f280b46e2b9a804b017828fe6bb09e16cf4b46a2c1c87154c091a617c27e48afaa19efa6e62feb828031cbd7f
-
SSDEEP
768:dgGzpDz7rd+Rppxa973jT5k5m1cN18uzmK7E3SsbQgJf:eGFfn3jdqL8uzdObQgJf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1968 AcroRd32.exe 1968 AcroRd32.exe 1968 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f91a062453358d4bc372ed812198f189_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a4cdb9cdbec5781de2fd4ca4e8151e10
SHA1f2a851df73f209227e9cebe0e17efee961cca8f7
SHA256be21bbecd46e958f1fb354881407124cd4e6771f8c33039060963ca0d23a3739
SHA5126673ad617dda4f93f45d32357c56bbda4bdbed5566e7758d8b6ca9bf4767459dd186f6a46c284a379b083a5f31837d9cb8183ff40074a4c369517b74b0fdbead