Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 07:39
Behavioral task
behavioral1
Sample
fc4211b5cc66158a9369462c80253ac1_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fc4211b5cc66158a9369462c80253ac1_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fc4211b5cc66158a9369462c80253ac1_JaffaCakes118.pdf
-
Size
112KB
-
MD5
fc4211b5cc66158a9369462c80253ac1
-
SHA1
992e025c0d5a7a8f6185e2bfa0921970539d5ab5
-
SHA256
857f2df490f567e6a758def5d76ba6c68585a6eb84b701fc50a3b54d1020b872
-
SHA512
85fcfb920b4987d30010ca53edff8dcce9ffa1911660c38353e58591e7b8b5300b6813a7c586f787ea96c1dcf731b37f126c531bc9e533793765bdf71d7726ef
-
SSDEEP
3072:IO1uXA9qnjGP7KEehCwyFDYbNqZsw1+PannQJ+tt:IM69gKEep/Ksw1jQJ6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2364 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2364 AcroRd32.exe 2364 AcroRd32.exe 2364 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc4211b5cc66158a9369462c80253ac1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD556d4ab8713a6127ad190a90955ab73d5
SHA1a9c0439d18836225011c65c07438decb1a2f25ca
SHA256eaeda3df616da8034f4a366f2fe83659da6dc3af375da28d144a0fd8fbc3b59b
SHA512a0e8a05ef68929766e4d99d100cb1494f63d464d4f1ae1af60d29d03ad4052efbaa51e963a49325d12ed6ef63b064410b2b4cadb5fa963be3af092a468d5e729