Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 13:56
Behavioral task
behavioral1
Sample
fa728bcb2309a2b9d7f20f43355b0da7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa728bcb2309a2b9d7f20f43355b0da7_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fa728bcb2309a2b9d7f20f43355b0da7_JaffaCakes118.pdf
-
Size
42KB
-
MD5
fa728bcb2309a2b9d7f20f43355b0da7
-
SHA1
863a7356e32e184322fa7afc5e79a9c4b0a04164
-
SHA256
67c6c7035951400a2458414bcd8f4c76b1e0ae925d344a4c6764e89b4433bf52
-
SHA512
25075a93f2af064b39d6ab112893bfb51fbf0ce38b52ef687771733392503370346d9fe5389d3b371f09dee378f1e549ad4ac7944c9d019123d2603a2cb3dcb9
-
SSDEEP
768:G5RDttOj8dua69TmVqzrA6EAVx6RVaHWBlB8nWjOzN5TI:GHO2+qVqvBEAx6RYKn8n60H8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2296 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fa728bcb2309a2b9d7f20f43355b0da7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aa25ce4f4476d262f18094da9b60e484
SHA1fbd6fad363f927aea45c4be5e92ecceeeedc18e4
SHA2569314724d6ee780644ae0c61dd81ed72123f0d4cc1c4cc05db2799848b4b89f74
SHA512eb8e37109f77dcbf247c10d7c09e3d375ea3d0adca0c0cebdd30cf82fc4d332d171275e945667cacb891368aa0f0a85198d94c5f735cbe6f3bbb8101d31760a6