Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 23:50
Behavioral task
behavioral1
Sample
fdf0b43f912a887ab59918824d520e66_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fdf0b43f912a887ab59918824d520e66_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fdf0b43f912a887ab59918824d520e66_JaffaCakes118.pdf
-
Size
68KB
-
MD5
fdf0b43f912a887ab59918824d520e66
-
SHA1
022d8275d28b46a12e16910b185199136542a513
-
SHA256
f0d82ee647a39cfb793e0e50e3e029128cac885a0adee47755692aea037ce257
-
SHA512
477c2f93d12e313e8fbb3da03b05d32a50f982732ed6cbb3f289b7de61202104c5001f3bc7cfc46ca4cc9ed31fdb653f82fe597bf37f0bb4e47c2d38d4d678e0
-
SSDEEP
1536:TRLzDCRc2Ges+Y6V/LCDzWUCqVop0+NF4NW6pOu26WUXrrl4k1:VL/CiRyUqtNHgeu2uj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2924 AcroRd32.exe 2924 AcroRd32.exe 2924 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fdf0b43f912a887ab59918824d520e66_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2924
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b7f189ba48944a8737291dad0a3dd4c5
SHA168a9c7c148ffd13fa26f387deb75bfec51a8def1
SHA256f6ead940c2b33f03d8c3bfdaf988e4d51a8a71b5fc0af8077fdb66eb473e6ced
SHA51247c0113f48451504d16a15cca662f7dbc12aab72bcaa3f3c9bf9d9b18c444ff27a3dc367467409d5097d256dfd7b5928490d20b7e2608c8bcde81b4d8881465f