Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 00:35
Behavioral task
behavioral1
Sample
fb85f0fd8772f386638603f8d14775e2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb85f0fd8772f386638603f8d14775e2_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fb85f0fd8772f386638603f8d14775e2_JaffaCakes118.pdf
-
Size
33KB
-
MD5
fb85f0fd8772f386638603f8d14775e2
-
SHA1
b35cac15647c9151a46af9f7c373ceb5e3747c05
-
SHA256
bd1f7b3860f8ca4fcb59db99b520650e0dadb07c8987ece0deaec1b86fca040f
-
SHA512
2bd795eaae80961c6b3c5f1dd7b7e80802f96fcbec9afb7f62e358315751d6c8183ae59626339b0b415090c17b30c2609c7d6111ec0eaba84287a1b88bc72e35
-
SSDEEP
768:XwLhD/ZffNDOafD/V12NF6RbdVRsq+YpHLI9iVgMPGgiDV:ALV/Zt92NIRbdVKpYdsUVtPGxV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb85f0fd8772f386638603f8d14775e2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55d09f303673aa24551e53713868158e4
SHA1dbb8453da12265fcd44b6d0ee2a1e51c46921ce4
SHA2563350096a851107322fd36f691a7dea48831fa793d41e5e78e0fb3e3f7696f2fb
SHA5129b9ea977e637c89adb1d636d567dab19c6439a92e7b0d82e2b2b78594d50092252043d197c75d08fcbe8a08b817bbcedb4589e2738354fc48004f91b0fee4d36