Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 20:45
Behavioral task
behavioral1
Sample
fd9c866461513cdc571c9b0ba242302b_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd9c866461513cdc571c9b0ba242302b_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fd9c866461513cdc571c9b0ba242302b_JaffaCakes118.pdf
-
Size
90KB
-
MD5
fd9c866461513cdc571c9b0ba242302b
-
SHA1
dab6b5a1d520704d5fe58a6d86812df9d20d8cf0
-
SHA256
b0b7481639e4e21508601fa8ae69a61603817cb7927b40b644215054013a0885
-
SHA512
049733501bdf4641131b58ff05c7f5dba7a6f99ad4e10f879422d4232d67d687246ce71539df7943465c097a767177fef844bce9b5865bce8ae20de1b3aa7f4d
-
SSDEEP
1536:a+fCdX0vKkvA3SxZRdSi6ow8jwNAhYgygKXqBaMRQsGUBxqPZkwJVWYpO2KyJlaB:NCdXZaAiFdSLow8kiByL6BdRQsHxe6ZV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2876 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2876 AcroRd32.exe 2876 AcroRd32.exe 2876 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd9c866461513cdc571c9b0ba242302b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD503e77784d48b5d1c39f6bd3522755047
SHA10c5243b70e2ae3f80c3daae59801ae2bc1dc5061
SHA256a507cff10a30b8336353dbb372be6ad121aef762347ee4c31d275c18a2728673
SHA512c156cf0f4a6362fab5a3d1b6800d3e09db93404050d5ec6f80720fb7a2a151fe4c618483f41343356422e7832e292122598382089a0bc5bf2b03929ea013d3a1