Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 17:14
Behavioral task
behavioral1
Sample
fac8f71881496b4d7b35d45372b20185_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fac8f71881496b4d7b35d45372b20185_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
fac8f71881496b4d7b35d45372b20185_JaffaCakes118.pdf
-
Size
75KB
-
MD5
fac8f71881496b4d7b35d45372b20185
-
SHA1
573552ad18bf6bf0e555c98903a8302c990b168e
-
SHA256
bd5c01b0083bcdf7dd4f95a7b2255b3218bec0b9c0578129f45d3f41cf7c1280
-
SHA512
db014698903df51c1ba7470f6c2ced25148309ee29940c75c27f30f2c504b7082edd1b85e938996afff4722ae83e1db8c694aa91c2f3e8f6f433e58ec8d30e27
-
SSDEEP
1536:O4FlokXyS02a6yqCOM+DrWPWWHpOv+QRMwG6WbOt/DrU/gZ:9lFySHt4OM+DTvhbGtivt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2392 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2392 AcroRd32.exe 2392 AcroRd32.exe 2392 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fac8f71881496b4d7b35d45372b20185_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2392
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bda0db60b02300756a3690a38d5a959c
SHA158583ae59a602a9e23d800ad27f0cca950bbffa9
SHA256b5e74995990a61f167aab18d8e1039d75866a07ceb2a89531fea951a55fafa88
SHA512425c12a107b9eac960d4cbdeafc60dfd05dc7e15cb40a29f486c2909534f66aeff75bea46842f34d5fd25a1222708f3920012e2af5ba2cdf5c60f42694c1fba3