Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 03:51
Behavioral task
behavioral1
Sample
f97143f5ce83592e93d3b0a84c314b66_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f97143f5ce83592e93d3b0a84c314b66_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f97143f5ce83592e93d3b0a84c314b66_JaffaCakes118.pdf
-
Size
79KB
-
MD5
f97143f5ce83592e93d3b0a84c314b66
-
SHA1
7e345925aaa9f6b3202b232272cb4ef21bb47b2a
-
SHA256
4b7b75b300d3355a404e3c0e4b8d3fb21a2737d7681c26dc274c547e5eff1ba7
-
SHA512
7434d27e730ab3b9f2ebd47ac338df2a3b11584b55e9f5ab68b37f0d8c990f5d193dd2b2377b844e43aa6113810017666be51b7cc2109a6651521608522b8bb1
-
SSDEEP
1536:Jd/kn5aqaQJsMQzDDBriwzolrAnrS91gvVlAjPv7BfykigHWpikHm1CDQYQCQ+E/:I4qaQ6MQznBriwMB9CCzvYcHZamU3VQN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f97143f5ce83592e93d3b0a84c314b66_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD598392880fa93f80d07c7d573b0a4008d
SHA1881876ffaddb4f3f7d15363444aba988a4009190
SHA256b226137dbfe616ff9f124470fdd402dacc63ffd3146bf0a4ae08a3494f290a12
SHA512ffc806690d69419df6385e298d7aeb09b48cbe054b8a6ff06fa16d468fef82126f3919b62c57052c20ac615bc904267f44b757b745984eef123ba4af47fead14