Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20-04-2024 13:06
Behavioral task
behavioral1
Sample
fcd3b15f3e4f02c4b1d8728489dff32a_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fcd3b15f3e4f02c4b1d8728489dff32a_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fcd3b15f3e4f02c4b1d8728489dff32a_JaffaCakes118.pdf
-
Size
77KB
-
MD5
fcd3b15f3e4f02c4b1d8728489dff32a
-
SHA1
10255946a5570961c8d5cf258864e249ebbff2b1
-
SHA256
d1daeac8d96492a6fb2c5ae4ed9cbd04825d8f6ac5940db763e4be4b966ac509
-
SHA512
b0cfdec21a2052a746aff1cc59eb1ae8f8f58fb95f2d6d0f4c63dc19d8d4dd2fb02bc525acebfba7432f995c54b3b867e7e1cdcd48a0c934bf3f9f86a398d2de
-
SSDEEP
1536:52lvVg6xNIeTBveKvOnrI/uw8mumKMnAqU2cYCqLUR5oyWV/XY2IjOz:5Whx7krI/huQnetnCyWVQ2Ii
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2748 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2748 AcroRd32.exe 2748 AcroRd32.exe 2748 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fcd3b15f3e4f02c4b1d8728489dff32a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2748
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52f75f5488c851276074eea84a566bc08
SHA16935c4832759b89a07d89a815075264a6db0a795
SHA25611a1e3ab85e6bb43ede42dea275554e23d65d40d1059c452c5a068ed62465334
SHA5123a29e0d304b97d9602bb243542fc784bba1e1ac9b542be023cb0500b80778032c29a2f317e9b47c1942277b21c91155aa8ec10963481b280a80cfbf7c93d5f79