Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20-04-2024 08:52
Behavioral task
behavioral1
Sample
fc61d1924f3d1da1754e2319edeaff25_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc61d1924f3d1da1754e2319edeaff25_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
fc61d1924f3d1da1754e2319edeaff25_JaffaCakes118.pdf
-
Size
34KB
-
MD5
fc61d1924f3d1da1754e2319edeaff25
-
SHA1
70c622e5e07c22a9e5316e47a086aeb3b8e9acff
-
SHA256
707b9a7f514b10de4ccba2a7f7b836fae319e1daf2699834934f6ae6482ed121
-
SHA512
a9cbb627f8f2a69a701acbcd61a1849698afca5d0f0be62eada4bd92a66eb94cad9a8014b3e4a92f52ceee19bfdf07abcdaf974914ca8f329dbffe02a55eaa38
-
SSDEEP
768:goA3xt2+x7GsJ1x3O/Kmm3ET3EJwe3E8CBfjLHSm3:go2tRx7d1x3pmxzEJ0JLHSm3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe 2956 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc61d1924f3d1da1754e2319edeaff25_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2956
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54927c9fd491f8870818434c09febbf43
SHA1c686f0fc381580b6211a320022593e87603f9c96
SHA2563fdd55b591452a96dd6a52d9c4b609855ea2daee5f2444856fdf179768b3ced2
SHA512ccec7c73e527753851411df7d9f0aaa51da5015b8f8f4d1f92b72ed8fab56f0e88e777fd8ae78468e959fbf805540011efe2724b1feabd882bfdb7ab431a8a95