Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 17:01
Behavioral task
behavioral1
Sample
fd34de2266b3acfaa6698ed1ecee4b1b_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd34de2266b3acfaa6698ed1ecee4b1b_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fd34de2266b3acfaa6698ed1ecee4b1b_JaffaCakes118.pdf
-
Size
77KB
-
MD5
fd34de2266b3acfaa6698ed1ecee4b1b
-
SHA1
98e3b91d1a4d26aff034bc9edf2a19caa09f4760
-
SHA256
87381111181eab0ad9a4f0b8dc3179bbafb779310a3b7cf7a0718e3232d76f31
-
SHA512
e6664bfa9c2e2c82e2d5e50449ab81c4e7744767bea1870e1db84464d3bfaf0d098508273d04a5f5a32d356d4820008449f74ac76e0d6a30f5898395d9d0f7fa
-
SSDEEP
1536:lBM89cB9rrWJg+eGH3Bn/9H9vDjFDLMQ3+W6pOu26WkIyHKn9JLlNq:A89oXWJgwx9HNDtN7u2KqvLK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd34de2266b3acfaa6698ed1ecee4b1b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1692
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD530342a502fed6538e5cd264f50d81037
SHA15ed5114d1e2005be9d6f4a02486a8771bcb1a83c
SHA256fc9d0804de89ad6dea1632732963411e1672fe9320097d730cc60d43c026e7d1
SHA51222905b1eacc1608a50efd39dd0851273135d9e612ac8f44e3dbb2e3d5b62e9891dbb8630c6d7764a763112a8556424d78e8cf670113a95bb786623902bf44c50